Quantum Optical Systems for the Implementation of Quantum Information Processing 
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We review the field of Quantum Optical Information from elementary considerations through 
to quantum computation schemes. We illustrate our discussion with descriptions of experimental 
demonstrations of key communication and processing tasks from the last decade and also look 
forward to the key results likely in the next decade. We examine both discrete (single photon) type 
processing as well as those which employ continuous variable manipulations. The mathematical 
formalism is kept to the minimum needed to understand the key theoretical and experimental 
results. 



I. INTRODUCTION 

Information is not independent of the physical laws 
that govern how it is stored and processed ^if. The 
unique properties of quantum mechanics imply radically 
different ways of communicating and processing infor- 
mation 2J. However, to realize the potential of quantum 
information science, quantum systems with very special 
properties are needed. For example, it is essential that 
the quantum system evolves coherently and thus must be 
well isolated from the surrounding environment, but, in 
order that the information stored in the system can be 
processed and read out, it must also be possible to pro- 
duce very strong interactions between the system and 
classical meters and control elements. In this paper we 
will review progress in achieving quantum information 
processing in optics, where the system in question is the 
quantum state of an electro-magnetic field mode at opti- 
cal frequencies. 



A. Quantum Information 

It was perhaps Wiesner Q who first realized that there 
are information tasks that can be achieved more effec- 
tively using quantum systems as the information carriers 
when he introduced his quantum money in 1972. The 
idea was to provide security against counterfeiting by 
encoding part of the bank note's serial number on quan- 
tum systems. This idea was famously extended to com- 
munications by Bennett and Brassard in 1984 Q when 
they introduced quantum key distribution, a system for 
securely distributing a cryptographic key. Both of these 
applications depend on the unique property that quan- 
tum information can not be cloned 5]. That is, given 
a quantum system in an unknown state, it is not pos- 
sible to produce an identical copy of the system (whilst 
retaining the original). 

Other communication tasks that could be achieved 
only with quantum systems started appearing in the early 
1990's. A key realization was that entanglement could be 
used as a resource for such tasks. A pair of spatially sep- 
arated quantum systems are said to entangled if the state 



that describes the joint system cannot be factored into a 
product of states describing the individual systems. For 
example if two distant parties share entanglement then 
they can communicate classical information at twice the 
classical rate through the technique of quantum dense 
coding ||6i]. Similarly, in the presence of entanglement, 
quantum information can be communicated via the ex- 
change of classical information through the technique of 
quantum teleportation 0. 

Around the same time that Bennett and Brassard were 
first describing quantum communication, Feynman Q 
noted the possibility that computer algorithms existed 
that could be more efficiently processed by quantum sys- 
tems than classical systems. Although toy examples of 
such algorithms were suggested by Deutsch soon after 
it was not till 1995 that Shor To] showed that an 
important problem, the determination of prime factors, 
could be solved in exponentially less time using a pro- 
cessor based on quantum systems, a quantum computer. 
The key technique, quantum error correction, was devel- 
oped soon after ^jj, |0| . This enables coherent correc- 
tion of the logical errors which will inevitably creep into 
any calculation on a quantum computer. Another influ- 
ential algorithm, showing speed up for the searching of 
an unsorted data base, was subsequently developed by 
Grover Ql- These developments showed that fault tol- 
erant quantum computers (i.e. where errors can be cor- 
rected in the presence of imperfect gate operations) were 
in principle possible and that such machines could solve 
interesting problems. This in turn led to an explosion of 
interest in the field of quantum information. 

Quantum information was originally discussed in terms 
of binary systems. Consider a two-level quantum sys- 
tem. This could be the spin states of an electron: up or 
down; two well isolated energy levels of an atomic system 
or; many other possibilities including various optical field 
states as we shall describe later. It is clear that such two 
level systems could be used to carry bits of information. 
For example, we could assign the value "zero" to one of 
the states, writing it in Dirac notation |Q| as |0), and 
"one" to the other state writing |1). A string of these 
objects could then faithfully represent an arbitrary bit 
string. 

However, quantum objects offer more possible manip- 
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ulations than classical carriers of bits. In particular not 
only can we have zero's and one's, but we can also have 
superpositions of zeros and ones such as the plus state 
1+) = (1/V2)(|0) + |1)). Indeed bits can just as effec- 
tively be encoded in these superposition basis states, for 
example using 1+) as a zero and |— ) = (l/\/2)(|0) — |1)) 
as a one. Because of these extra degrees of freedom we re- 
fer to information digitally encoded on quantum systems 
as quantum bits or qubits [l5l |. 

One non-classical feature of encoding in this way is the 
fact that different bases do not in general commute. Thus 
simultaneous, ideal measurements in both bases cannot 
be made. Furthermore any measurements which obtain 
information about the bit values of one basis inevitably 
disturbs the bit values of the other basis. As we have 
mentioned these features (and more generally the no- 
cloning theorem) can be used to create a secure com- 
munication channel via the technique of quantum key 
distribution (also referred to as quantum cryptography) . 

Another feature of qubits is their ability to span all 
different bit values simultaneously. This is obviously true 
of a single qubit where the |-|-) state, when viewed in the 
computational basis, |0) and |1), equally spans the two 
different bit values, and 1. This continues to be true 
for multi-qubit states. For example suppose we start with 
two qubits in the state 

|0)|0) (1) 

where the first ket represents the first qubit and the sec- 
ond ket the second qubit and a tensor product is implied 
between their two Hilbert spaces. If we rotate both of 
them into their plus states we end up with the state 

|0)|0) + |0)|1) + |1)|0) + |1)|1) (2) 

which is an equal superposition of all four possible two 
bit values. This generalizes to n qubits where the same 
operation of rotating every individual qubit leads to an 
equal superposition of all 2" bit values. 

Although this ability to span all possible inputs simul- 
taneously hints at the possibility of increased communi- 
cation or computation power using qubits, it is not the 
whole story. Note in particular that analogues of the sort 
of superpositions represented by Eq.[5]can also be created 
in classical optical systems as superpositions of classical 
waves. In order to unlock the full power of quantum in- 
formation we need to create entangled states such as the 
state 

|0)|0) + |1)|1) (3) 

which clearly cannot be factored into contributions from 
the individual qubits and has no classical wave analogue. 

If we consider information processing using qubits in- 
stead of classical bits we need to introduce quantum gates. 
Some of these will have classical counterparts, for exam- 
ple the NOT gate takes |0) to |1) and vice versa. On 
the other hand some gates will have no classical ana- 
logue, such as the Hadamard gate which takes |0) to 



(1/V2)(|0) + |1)) and |1) to {1/V2){\0) - |1)). We also 
require two qubit gates such as the control-NOT (CNOT) 
which preforms the NOT operation on one qubit (the 
target) only if the other qubit (the control) has "one" 
as its logical value. Eventually, if large arrays of gate 
operations can be implemented efficiently, and fault tol- 
erantly, on many qubits, one could consider performing 
quantum computation. Although considerable progress 
has been made, the realization of quantum computation 
experimentally still remains a long way off. 

In more recent years quantum information research has 
been extended to systems with Hilbert space dimensions 
greater than two. In particular, there has been consider- 
able interest in infinite dimensional Hilbert spaces and 
the quantum information properties of continuous de- 
grees of freedom such as position and momentum 
Continuous variable versions of teleportation and key 
distribution Is", 1^ were developed early on and many 
other protocols followed. Quantum computation propos- 
als based on continuous variables have also been devel- 
oped mill. 



B. Quantum Optics 

The invention of the laser in the early sixties and its 
subsequent development led to an unprecedented increase 
in the precision with which light could be produced and 
controlled, and hence enabled the ability to systemati- 
cally investigate the quantum properties of optical fields; 
quantum optics. The fundamental theoretical description 
of the quantized electromagnetic field was due to Dirac 
in the early days of quantum mechanics |22j |. Stimu- 
lated by the new technological possibilities, Glauber [23| . 
Louiselle and others laid the theoretical basis for the 
description of the laser and identified the signatures of 
non-classical light. 

It was soon realized that quantum optics offered a 
unique opportunity to test fundamentals of quantum the- 
ory not previously available for experiments. The first 
experiments to demonstrate in a semi-controlled way the 
production of single light quanta or photons were ar- 
guably those of Kimble et al [2^ based on the resonance 
fluorecense of single emitters, as proposed by Carmichael 
and Walls |2^. Pairs of photons produced by atomic 
cascades were shown to be in entangled states by As- 
pect, Grangier and Rogers ^ with non-classical corre- 
lations sufficiently strong to exclude all local-realistic hid- 
den variable theories through violation of Bell inequali- 
ties [25. These results followed from the earlier work 
of Clauser, et al |2^ and Freedman Js^ that adapted 
the original inequalities to the experimental setting. It 
should be noted that even now experimental efficiencies 
are not high enough to avoid the need for a fair sampling 
assumption in the data analysis of these types of experi- 
ments, thus not closing all "loopholes" for these inequal- 
ities. Heralding of single photon states using atomic cas- 
cades 31] and parametric down conversion ^^32] followed. 
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The latter technique uses a second order non-Hnearity 
to produce pairs of photons at half the pump frequency 
spontaneously, and has been the workhorse of photon 
experiments for the last twenty years. That the pairs 
of photons from down conversion can be made indistin- 
guishable and hence exhibit Bosonic interference effects 
was shown in key experiments by Hong, Ou and Mandel 

M 

Squeezed states, that exhibit non-classical statistics for 
their quadrature amplitudes, which are continuous vari- 
ables, were discussed in the seventies jsj and eighties [s^ 
and eventually demonstrated by Wu et al ||3^. Demon- 
stration of entanglement between quadrature amplitudes, 
strong enough to demonstrate the paradox of Einstein, 
Podolsky and Rosen followed by Ou et al in the 
early nineties [s^. 

Light can be described quantum mechanically in terms 
of the mode annihilation operator a, its conjugate, the 
creation operator and the electromagnetic field mode 
ground, or vacuum state |0). The action of the creation 
operator on the vacuum state is to create a single pho- 
ton number state, in a single spatio-temporal mode, i.e. 
a^|0) = In general a^|n) = \/n + l|n -|- 1) where n 
is a positive integer. Similarly the annihilation operator 
annihilates a single photon in a particular single spatio- 
temporal mode and in general a^|n) — \/n\n — 1). The 
number states form an ortho-normal basis convenient for 
representing arbitrary states. The mode operators obey 
the commutation relation [a, a^] = 1. It is often conve- 
nient to pick our mode decomposition in terms of sin- 
gle frequency eigenstates using the nomenclature a^^ and 
|0)i^. Then we have 

[a<.',ai] = (OL'|0). =5(c^'-c^) (4) 

The optical observables of interest are the photon num- 
ber, h = a^a, and the quadrature amplitude, = 
e^^d + e^^^a'^ . Photon number is proportional to intensity 
for bright fields and can be measured by photo-detectors. 
For dim fields individual photons can be resolved with 
photon counters. The quadrature amplitude of the field 
can be measured by beating the signal field with a bright, 
phase reference field at the same optical frequency, a local 
oscillator (LO), and then measuring it with by photo- 
detection. This is known as homodyne detection. The 
angle 9 is the phase difference between the signal and 
the LO and is usually taken to be in-phase {9 = 0) or 
out-of-phase {9 = it), giving two conjugate (i.e. non- 
commuting) variables analogous to position and momen- 
tum. 

As well as the number states, another key state in 
quantum optics is the coherent states. The coherent 
states are displaced vacuum states defined by 

|a) = D{am (5) 

where the displacement operator is 

D{a) = e''('^"+s^"') (6) 



The coherent states are eigenstates of d with eigenvalue 
a. This leads to average values for their quadrature ob- 
servables that are the same as for a classical field with 
the same amplitude. Hence the coherent state is often 
thought of as the quantum mechanical state which is the 
closest approximation to a classical optical field. The 
output of a well stabilized laser is a mixed state which 
can be approximately decomposed as an ensemble of co- 
herent states with fixed magnitude but random phases 
|39| . However, in situations where the phase is unim- 
portant, or when the LO is derived from the same laser 
as the signal such that the phase is common mode, it 
is convenient to model laser output as being in a single 
coherent state of fixed magnitude and phase. 

Because of the success in demonstrating fundamental 
quantum effects in optics, light was an obvious candi- 
date for demonstrating the predictions of quantum in- 
formation science. Here we will review quantum optics 
successes in quantum information science and look at its 
potential for achieving more complex quantum process- 
ing tasks in the future. 

II. ENCODING CLASSICAL INFORMATION 
ON LIGHT 

Before considering the quantum information potential 
of optics we first discuss the encoding of classical in- 
formation on quantum states of light. Current optical 
communications systems operate in a regime in which 
quantum effects can be ignored. In the future, as higher 
and higher communication efficiency is required, this is 
likely to change. Here we consider the ultimate limits 
imposed by quantum mechanics. We quantify this using 
the channel capacity, a concept that describes the max- 
imum amount of information that can be transmitted 
based on statistical arguments. More detailed reviews of 
the techniques for the encoding, propagating and decod- 
ing of information on quantum systems can be found in 
Ref. ^4^ and ReL 

The Shannon capacity [4^ of a communication channel 
operating at the bandwidth limit is 

C^llog,[l + ^] (7) 

where N is the noise power (variance), assumed Gaus- 
sian, and 5* is the signal power, also assumed Gaussian 
distributed. Here C is in units of bits per symbol. Eq[7| 
can be used to calculate the channel capacities of quan- 
tum states with Gaussian probability distributions such 
as coherent states and squeezed states. Consider first a 
signal composed of a Gaussian distribution of coherent 
state amplitudes all displaced at the same quadrature 
angle, say 9 — {a real). The signal power Vg is given 
by the variance of the distribution. The noise is given 
by the intrinsic quantum noise of the coherent states, 
Vn = {X"^) — {X)"^ — 1. Because the quadrature angle of 
the signal is known, homodyne detection can in principle 
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detect the the signal without further penalty, thus the 
measured signal to noise is S/N = Vg/Vn — Vs. 

In general the average photon number per bandwidth 
per second of a light beam is given by 

n^\iV+ + V-)-l (8) 

where (^~) are the variances of the maximum (min- 
imum) quadrature projections of the noise ellipse of the 
state. These projections are orthogonal quadratures, 
such as in-phase and out-of-phase, and obey the uncer- 
tainty principle V^V^ > 1- In the above example one 
quadrature is made up of signal plus quantum noise such 
that = Vs + 1 whilst the orthogonal quadrature is just 
quantum noise so = 1. Hence n = l/AVg and so the 
channel capacity of coherent states with single quadra- 
ture encoding and homodyne detection is 

a-iog2[VTT4^] (9) 

Showing in an experiment that a particular optical 
mode has this capacity would involve: (i) measuring the 
quadrature amplitude variances of the beam, and 
V~ , (ii) calibrating the sender's signal variance and (iii) 
measuring the receiver's signal to noise. If these measur- 
ments agreed with the theoretical conditions above then 
Shannons theorem tells us that an encoding scheme ex- 
ists which could realize the channel capacity of Eq|51 An 
example of such an encoding is given in |43| . 

If the average photon number per symbol is such that 
n > 2, improved channel capacity can be obtained by 
encoding symmetrically on orthogonal quadratures and 
detecting both quadratures simultaneously using a 50:50 
beamsplitter followed by dual homodyne detectors, one 
for each quadrature (equivalently heterodyne detection 
can be used). Because of the non-commutation of or- 
thogonal quaratures there is a penalty for their simulta- 
neous detection which reduces the signal to noise of each 
quadrature to S/N = 1/2T4. Also because there is sig- 
nal on both quadratures the average photon number of 
the beam is now n = l/2Vs. On the other hand the total 
channel capacity will now be the sum of the two indepen- 
dent channels carried by the two quadratures. Thus the 
channel capacity for a coherent state with dual quadra- 
ture encoding and heterodyne detection is 

Cch = il0g2[l + ^ ] + ilog2[l + ^ ] 

= l0g2[l+fi] (10) 

which exceeds that of the single quadrature homodyne 
technique (EqlSJ for n > 2. 

If we restrict ourselves to a semi-classical treatment of 
light the above channel capacities are the best achievable. 
However the channel capacity of the homodyne technique 
can be improved by the use of non-classical, squeezed 
light 44] . With squeezed light the noise variance of the 
encoded quadrature can be reduced such that Vne < 1, 
whilst the noise of the unencoded quadrature is increased 



such that Vnu > 1/Kie- As a result the signal to noise is 
improved to S/N = Vs/Vm whilst the photon number is 
now given by Eq|S| but with = Vs + Vne and V^ = 
1/Kie, where a pure (i.e. minimum uncertainty) squeezed 
state has been assumed. Maximizing the signal to noise 
for fixed n leads to S/N — 4{n + fi?) for a squeezed 
quadrature variance of Vne,opt = 1/(1 + 2n). Hence the 
channel capacity for a squeezed beam with homodyne 
detection is 

Csh^\og^[l + 1n] (11) 

which exceeds both coherent homodyne and heterodyne 
for all values of n. 

In principle, a final improvement in channel capacity 
can be obtained by allowing non-Gaussian states. The 
absolute maximum channel capacity for a single mode is 
given by the Holevo bound and can be realized by encod- 
ing in a maximum entropy ensemble of number states and 
using photon number detection. This ultimate channel 
capacity is 

Cpock = (1 + n) log2[(l + n)] - n\og^[n] (12) 
which is the maximal channel capacity at all values of n. 

III. OPTICAL QUBITS 

We now consider how quantum information can be car- 
ried by light. There are a number of ways in which qubits 
can be encoded optically which fall into two broad classes: 
dual rail and single rail encoding. In dual rail encodings 
two orthogonal quantum optical modes are used. In sin- 
gle rail encoding only one quantum optical mode is used, 
although a second classical mode is implicitly needed as a 
phase reference. In the following we will begin by describ- 
ing these encoding techniques and discussing a number 
of examples. We will then focus on dual-rail encoding 
and discuss current experimental approaches and future 
prospects for "better" qubits. 

A. Dual Rail Encoding 

Consider two orthogonal optical modes represented by 
the annihilation operators d and h and the vacuum modes 
|0)a and |0)b. For brevity we will write |0)q «) |0) b ee 1 00). 
We define our logical qubits as |0) = a^|00) = |10) and 
|1) = 6^|00) = |01). That is single photon occupation of 
one mode represents a logical zero, whilst single photon 
occupation of the other represents a logical one. This is 
dual rail encoding. 

For example suppose |0)a and jO);, are spatio-temporal 
modes with identical profiles, polarization and centre fre- 
quency, synchronized in time, but spatially separated. 
Arbitrary single qubit operations can be achieved using 
a beamsplitter and two phase shifters as illustrated in 
Fig. ^ A beamsplitter is a partially reflecting mirror 
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that can coherently combine two optical modes in a set 
ratio. The interaction in the figure produces the follow- 
ing Heisenberg evolution of the mode operators: 

a y^a + e*" ^1 - rjb 

b e"^{^yT^a-e'''yT^b) (13) 

where 77 is the intensity reflectivity of the beamsplitter. 
We have assumed the optical elements are lossless, a rea- 
sonable assumption for modern components. We have 
also assumed perfect mode matching between the two 
input modes to the beamsplitter, something rather more 
difficult to arrange in practice. Eq^l implies the follow- 
ing qubit evolution !45| : 

|10> ^ V?^|10) + e»^v/r^|01) 

|01) ^ e*«(yr^|10)-e^'^yr^|01» (14) 

which corresponds to an arbitrary single qubit unitary. 



9 



b 




<t> 



FIG. 1: Beamsplitter and phase-shifter circuit for producing 
an arbitrary single qubit evolution on a spatial dual-rail qubit 

More commonly two identical spatio-temporal modes 
but with different polarizations, say horizontal and ver- 
tical, will be used as the dual rails. Then we may write 
|0) = |10) = \H) and |1) = |01) = \V). Half and quarter- 
wave plates replace the phase shifters and beamsplitters 
in achieving arbitrary unitaries |46j| . In particular the key 
operation the Hadamard gate, defined by |0) |0) + |1) 
and |1) |0) — |1), is implemented by a half wave-plate 
oriented at 22.5 degrees to the optic axis. Detection in 
any basis can be achieved via wave plates and polariz- 
ing beamsplitters which effectively converts polarization 
encoding into spatial encoding (see Fig.[2J). The ease of 
manipulation and stabilty of polarization states has made 
this encoding the most popular in optics. 

Another possibility is a temporal encoding in which 
the dual rails are spatio-temporal modes which are iden- 
tical except for a time displacement 47] . These can again 
be manipulated at the single qubit level with linear op- 
tics, though not deterministically unless fast electro-optic 
switches are available. 

A final possibility is a frequency encoding in which, this 
time, the dual rail modes are identical except for a fre- 
quency off-set. Here an active element is required in or- 
der to move power coherently between different frequen- 
cies. If the frequency off-set is in the radio to micro-wave 



band then acousto-optic modulators and asymmetric in- 
terferometers can be used for this purpose |48j| . Although 
the most difficult to manipulate the frequency encoding 
would likely be the most robust to fibre transmission. 




XI2 m XI2 PBS 



FIG. 2: Combination of half and quarter wave plates ori- 
ented at particular angles, a polarizing beamsplitter (PBS) 
and photon counting, enables detection of polarization dual- 
rail qubits in any basis. 



B. Single-Rail Encoding 

Single-rail encoding requires only a single quantum 
mode, that can be placed into the states |0) — |0) and 
|1) — 1^) or any superposition of them. The only require- 
ment on these states is that they are orthogonal, i.e. that 
(0|-0) = 0. In general such qubits will be non-stationary, 
so a good "clock" is required in order to detect and ma- 
nipulate them. In optics this clock, or phase reference, 
will typically be a classical optical mode derived from 
the master laser which is driving all the optical modes, 
in other words a local oscillator (LO). 

Perhaps the simplest choice for |(/)) and |i/)) are the 
vacuum and single photon states, such that |0) — |0) 
and |1) = |1). Producing and manipulating superpo- 
sition states of the form /i|0) + t^|l), as required for 
this type of qubit is not so easy. However, a universal 
set of non-deterministic operations have been described 
pgf and superposition states have been produced non- 
deterministically in experiments [sol l5l[ . One impor- 
tant feature of the single-rail encoding is that it is rela- 
tively easy to produce entangled states. If a single pho- 
ton is split on a 50:50 beamsplitter the resulting state 
is (l/\/2)(|0) |1) -I- 11)|0)) which is a maximally entangled 
two c^ubit state in the single-rail encoding. Such states 
can then be used as a resource for quantum processing 
tasks. 

Another possible choice for 10) and |?/') are two differ- 
ent coherent states, such that |0) = |a) and |1) = \(3). 
In general such states will not be orthogonal but their 
overlap is given by |(a|/3)p = exp[— ja — which is 
very small for quite modest differences in the ampli- 
tudes of the coherent states. A popular choice is to 
take 13 = —a. By choosing a > 2 a negligible overlap 
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is achieved. The computational states, \a) and | — a) 
can be distinguished via homodyne detection. A use- 
ful feature of this choice is that the equal superposition 
state I a) + I — a) (la) — | — a)) contains only even (odd) 
photon number terms and so these orthogonal diagonal 
states can be distinguished by photon counting. A num- 
ber of groups have discussed quantum information tasks 
using this encoding 21, 52, 53, As for the single 

photon single-rail scheme, single qubit unitaries are dif- 
ficult with this encoding but entanglement production is 
relatively easy. Indeed, splitting a superposition state 
like I a) -|- I — a) many times on a beamsplitter leads to 
multi-mode entanglement. Whilst production of the co- 
herent computational states is straightforward, to date 
the only experimental realizations of the superposition 
states have come from cavity quantum electro-d yna mics 
experiments ISSllSal , though promising schemes |53 and 
initial results |Kq| suggest small traveling wave superpo- 
sition states may be possible in the near future. 

More exotic optical states have also been suggested for 
single rail encoding [20| that have nice error correction 
properties, but these are likely to be more difficult again 
to produce experimentally. 

C. Postselection and Coincidence Counting 

Producing and detecting single photon states effi- 
ciently is a major technological challenge. Currently the 
best single photon detectors have efhciencies around 90% 
and the most efficient single photon sources are around 
55%, but typically in practical situations these numbers 
are much lower. This presents a major problem for single 
rail schemes where typically the loss of a photon results 
in a change to the qubit state and hence logical errors. 
In dual-rail schemes on the other hand, photon loss re- 
sults in no qubit arriving (rather than the wrong qubit) 
and so can quite easily be filtered out of the data as we 
shall now describe. This is another reason why most op- 
tical quantum information demonstrations are currently 
based on dual-rail logic. 

We begin by discussing how single photon experiments 
can be performed by strongly attenuating a single mode 
laser source. We can represent the state of such a laser 
source by the state 

\^)^\0)+a\l) + ^\2) + ... (15) 

As we attenuate the source more and more, a becomes 
much less than one and we can write to a good approxi- 
mation 

l^)-|0)+a|l) (16) 

We now have a source which in any particular time in- 
terval (length determined by the frequency dependence) 
has a high probability of producing vacuum; some small 
probability of producing a single photon state and; a neg- 
ligible probability of producing a multi-photon state. If 



a photon counter is placed at the end of the experiment 
and we only worry about those times when the detec- 
tor "clicks" then we will postselect just the single photon 
part of the state. If the source is polarized then it can be 
manipulated as a dual-rail qubit. Notice, however, that 
it is a rather inconvenient qubit source as it rarely works 
and you only know it worked after the fact, by evaluating 
the detection record. Never-the-less this type of source 
has successfully been used to demonstrate single qubit 
type experiments such as quantum key distribution (see 
section Hvjl . 

A major problem arises with an attenuated coherent 
source if we try to move to experiments requiring two 
qubits. One might assume we could use two highly at- 
tenuated coherent sources and then postselect only those 
events where two photons appear at the end of the ex- 
periment. However, the joint state of two equal power, 
attenuated lasers is 

= (|0)+a|l) + |J|2) + ...), 

(|0)+«|l) + |^|2) + ...)fc 

= |0)a|0)b + a(|l)a|0)b+|0),|l)6)-f 

|^(2!|l),|l), + |2),|0), + |0)a|2),) + .(17) 

where the first ket refers to one source whilst the second 
one to the other source. Notice that if we go to order 
then there is indeed a term with a single photon state in 
each beam. However, terms involving pairs of photons in 
one beam with vacuum in the other occur with the same 
probability. Postselecting on two photon events will not 
in general remove these terms. Hence it is not possible 
in general to perform two qubit experiments using highly 
attenuated laser sources. A more sophisticated solution 
is required. 

Since the late eighties, the solution of choice has been 
parametric down conversion in a X2 medium js^]. Weak 
parametric down conversion results in the spontaneous 
converstion of single pump photons at the harmonic fre- 
quency into pairs of photons at the fundamental. If 
the down conversion is spatially non-degenerate then, in 
the Schrodinger picture, initial vacuum inputs are trans- 
formed according to 

I0)a|0)fc^(|0)a|0)b + X'|l)a|l)b + X"|2)a|2)fc + ...) (18) 

where x' is an effective non-linear interaction strength, 
proportional to the pump power. If we now allow x' to 
be very small, which is not hard to arrange experimen- 
tally, then the state produced is given to an excellent 
approximation by 

|V^)a6= |0)a|0)6-f X'|l)a|l)fe (19) 

In contrast to eau. (|17|l the state in eau. (|19|l has only 
the desired two photon term to first order in x' ■ If we 
postselect only those events from the detection record in 



7 



which 2 photons are detected "simultaneously" or in co- 
incidence (within some preset time window) then we will 
only record the part of the state which is due to the pairs 
of photons. Thus by using the combination of parametric 
down-conversion, the polarization degree of freedom and 
postselection, we can perfom, at least in principle, 2 qubit 
experiments. Experiments carried out this way are some- 
times referred to as coincidence basis experiments and we 
will discuss various examples in later sections. However, 
note that this source is still spontaneous, ie successful 
events are rare, random and we do not know if they have 
occurred until after the fact. Although, 3 and 4 qubit ex- 
periments have been achieved by a simple generalization 
of the techniques just outlined, the cost is an exponen- 
tial drop in the probability of success. Thus, although 
experiments carried out in coincidence can demonstrate 
the basic physics of particular systems, they are intrin- 
sically not scaleable to large scale quantum information 
processing. Progress in producing sources without this 
drawback are discussed in the next section. 



D. True Single Photon Sources 

We now discuss two distinct approaches to producing 
better approximations to single photon states. The first 
is to create a heralded single photon source. That is a 
source which, though not always producing a single pho- 
ton state, produces a clear signal when successful. Such 
a source could be made semi-deterministic by the use of 
quantum memory. The second approach is to produce 
an on-demand source, which deterministically produces 
a single photon state when requested. 

1. Heralded Single Photons 

By detecting one of the output modes and only accept- 
ing the other output if a photon is detected, a heralded 
single photon source can be created using spatially non- 
degenerate down-conversion. From an idealistic point of 
view the conditional state when a single photon is de- 
tected in mode a can be obtained from equation 119|) as 

(l|a|V')afc=x'|l>6 (20) 

indicating that a single photon state is created in mode b 
with probability |x'p. In reality things are not so simple. 

We expand the output state of the down-converter in a 
basis of wave-number eigenstates, each defining a single 
frequency spatial mode, to obtain 

\^)ab = \0)a\0)b+x' J dkadhF{ka,h)\l)a\l)b (21) 

where ki is the wave vector of the ith beam and the func- 
tion F{ka,kb) describes the spatio-temporal structure of 
the modes. The intrinsic spatio-temporal resolution of 
the photon counter far exceeds the read-out resolution. 



Thus the photon counter selects an ensemble of distin- 
guishable single photon modes of which the experimenter 
is ignorant. This situation can be described by the mixed 

state 

Pa= J dkaT{ka)\l)a{l\a (22) 

where T(ka) is the spatio-temporal distribution of the 
detected ensemble. The output state, conditional on a 
photon count, is then 

Pb^Tra[\lp)ab{'ip\abPa] (23) 

In general p?, is a mixed state, however if T{ka) is centred 
on but much "narrower" (both spatially and temporally) 
than F[ka,kb), then to a good approximation the pure 
single photon number state 

\^)b ^ X' J dkt,T{ki,)\l)b (24) 

is produced. 

Perhaps the most conclusive demonstration of photon 
production by this (or indeed by any) method was the 
experiment by Lvovsky et al.[59j. A beta-barium bo- 
rate crystal was used in a type I arrangement to produce 
frequency degenerate but spatially non-degenerate pho- 
ton pairs. Transform limited pulses at 790 [nm] from a 
Ti:Sapphire laser were doubled and used to pump the 
crystal. Dispersion tends to make the pump and signal 
beams follow different paths through the crystal. Great 
care was taken to minimize any distortions of the spatial 
and temporal modes of the outputs due to this walk-off 
of the pump beam. The trigger photons were passed 
through a spatial filter and a 0.3 [nm] frequency filter 
before being counted on a single photon detector. The 
success of the heralding process was characterised by per- 
forming homodyne tomography on the conditionally pro- 
duced photon states. For best results the local oscillator 
pulse (LO) used in the homodyne detection of the signal 
must be accurately mode-matched to the single photon 
state. Mode matching with a visibility of about 80% was 
achieved. 

The homodyne data collected was then used to pro- 
duce the Wigner distribution of the single photon state 
|60| . The Wigner distribution is a quasi-probability func- 
tion for the quadrature amplitudes of the field state. The 
marginal distributions for the individual quadratures ob- 
tained from the Wigner function correspond to their re- 
spective probability distributions. Normalization of the 
distribution was achieved by simultaneously collecting 
vacuum state data. The resulting Wigner function was 
consistent with a mixed state comprised of 55% single 
photon state and 45% vacuum. Although imperfect the 
single photon state was still pure enough to display neg- 
ative regions in the Wigner distribution, a highly non- 
classical effect that demonstrates the strongly quantum 
mechanical nature of the detected single photon state. 

Lvovsky et al's results clearly show that a single pho- 
ton state can in principle be produced in this manner but 



8 



it also highlights problems with this approach. For exam- 
ple, in order to obtain a conditional state which is as pure 
as possible, strong attenuation was applied to the trigger 
photon resulting in low single photon state production 
rates of about one photon every 4 seconds. Also, mode 
matching of the single photon state is seen to be a difficult 
problem. A more promising and practical solution would 
be to mode-match the single photon state into an optical 
fibre for subsequent use down-stream. The best results 
to date for this difficult problem were achieved by Kurt- 
siefer, Oberparleiter, and Weinfurter |^ who obtained 
about 40% single photon contribution to the conditional 
state, 

Finally, it is clearly inconvenient that the photons in 
these experiments are produced at random times. A 
possible solution to this problem suggested by Migdall, 
Branning and Casteletto [b^ is to pump many crystals 
simultaneously so that the probability that at least one 
of them produces a pair is high. Electro-optic switches 
could then route the successfully triggered photon into 
the output mode (see Fig. OJa)). Another solution to 
this problem, proposed and demonstrated in principle by 
Pittman, Jacobs, and Franson |6^ . is to inject the sin- 
gle photon state into an optical fibre storage loop when 
the trigger photon is detected. The captured photon is 
then held there till required, when it is switched out of 
the loop (sec Fig. OJb)). If the round trip time of the 
loop is matched to the repetition rate of the pulsed pump 
laser then a number of loops can be loaded and then re- 
leased simultaneously to produce several single photons 
states at the same time. Currently (as well as the mode 
matching problem discussed above) the losses associated 
with the Pockell cells used to switch the photons are pro- 
hibitively large. 

2. Single Photons on Demand 

The dream of a push-button single photon source can 
most nearly be realized by generating light from a single 
isolated emitter such as a single ion or atom. The trick 
here is that a single emitter can only produce a single 
photon "at a time" with some dead time between emis- 
sions while the source is re-excited. The effect is that the 
output state can be written (in an idealised fashion) as 

|V')-|0)+a|l)+r(|^|2> + ...) (25) 

where r is a number between and 1 representing the 
suppression of higher photon number terms. If r is very 
small then a can be made large, such that there is a high 
probability that a single photon will be emitted, whilst 
the probability of multiple photon emission remains very 
low. 

The first experiments of this kind were performed in 
the late seventies However, although they clearly 

displayed the photon anti-bunching expected of a single 
photon source, they were very inefficient because they 



(a) 



(b) 




FIG. 3: Two schemes for producing pseudo on-demand 
sources from heralded sources. In (a) an array of downcon- 
verters (DC) are pumped simultaneously. Photon counters 
monitor one of the output modes of each DC to see if it fired. 
If one of the counters triggers the other mode of the corre- 
sponding DC is sent to the output via an optical router. For a 
sufficiently large array the probability of at least one DC pro- 
ducing a pair becomes large. In (b) a single DC is pumped. 
If the trigger detector fires a fast optical switch captures the 
photon in a delay line. At some later time the photon can be 
released on demand by flicking the optical switch open. 



radiated into 47r steradians and, being based on atomic 
beams, there was little that could be done to improve 
matters. More recently various attempts have been made 
to create more efficient single emitters. These included: 
placing single neutral atoms or ions into high finesse opti- 
cal cavities 0, |6^ such that the photon emission should 
be into a single Gaussian mode; close coupling to single 
solid-state emitters such as neutral vacancy (NV) centre 
in diamond and; the construction of single quantum- 
dot emitters integrated into distributed Bragg reflector 
(DBR) cavities 67]. 

Initial experiments on quantum dot emitters were car- 
ried out by Santorini et al. |63- Self-assembled InAs 
quantum dots embedded in GaAs were sandwiched be- 
tween DBR mirrors to form tiny, high finesse, mono- 
lithic cavities in the form of 5 micron high pillars. These 
were then cooled to 3-7 [K] and pumped by a pulsed 
Ti:Sapphire laser. The quantum dot emission, at around 
935[nm], was spectrally filtered (0.1 [nm]) and a single 
polarization was selected before being coupled into single- 
mode optical fibre. The efficiency of single photon pro- 
duction was estimated to be about 30%. 

The single-photon states thus produced were charac- 
terized by their g'-^-' factor which was typically of the 
order of 0.06 (r^ w 5'^') showing good suppression of 
two photon emission. To test the indistinguishability of 
the photon states the Hong-Ou-Mandel dip j33|] between 
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consecutive emissions was measured. The inferred visi- 
bihty of the dip when measurement imperfections were 
taken into account was about 70%. 

Intrinsic time-jitter due to the spontaneous excitation 
process employed has been identified as the prime cause 
of the loss of photon indistinguishability between pulses 
in the quantum dots (6^ . The prospects for indistin- 
guishability between independent emitters are more re- 
mote due to the inherent variability of the structures. 
A different approach which does not suffer from these 
drawbacks is to place a single ion in a high finesse cavity, 
as demonstrated by Keller et al [^. A single calcium 
40 ion was trapped inside an 8mm, high finesse cavity 
with a 1.2 MHz decay rate. After laser cooling, a photon 
is produced through a cavity assisted Raman process, 
which is coherent and does not suffer from inhomoge- 
neous broadening. Suppression of two photon events was 

« 0.01 and detection limited. The device could pro- 
duce a stream of single photon events over more than an 
hour, at a repetition rate of 100 KHz and a photon pro- 
duction efficiency of about 5%. Photon temporal indis- 
tinguishability was confirmed through observation of the 
photon wave-packet spread via the photon arrival time 
probability distribution. 

The advantages in purity of the ion-trap photon source 
over the quantum dots comes at the price of a much more 
complicated set-up and much slower repetition rates. For 
both systems, the modest efficiencies mean that they are 
still effectively spontaneous sources. However, progress 
is rapid and we may anticipate systems combining the 
best aspects of the present systems with high efficiency 
in the not too distant future. 



E. Characterising photonic qubits and processes 

We now discuss the characterization of photonic qubits 
and processes. Our analysis assumes postselection, i.e. 
we only consider events in which a photon is detected. Of 
course this characterization cannot be carried out for a 
single event because of the probabilistic interpretation of 
quantum mechanics. But given a large ensemble of detec- 
tion events, corresponding to identically prepared pho- 
tons and/or interactions, a recipe can be given for deter- 
mining the state of the ensemble or the process through 
which the ensemble was evolved. 

We consider polarization encoded qubits. The polar- 
ization state of the photons is most generally described 
by the density operator p. Our observables are the Stokes 
operators (corresponding to the classical Stokes parame- 
ters [13) 
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where hj is the number operator for the Jth polarization 
mode. The eigenstates of 5*1 are \H) and \ V) with eigen- 



values -1-1 and —1 respectively. Similarly the eigenstates 
of 52 are \D) and \A) and of S^ are \R) and \L). The 
expectation values of the Stokes operators are related to 
measurement by 
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where Rh and Ry are the count rates recorded at 
the H and V output ports respectively of a horizon- 
tal/vertical polarizing beamsplitter and similarly for the 
diagonal/anti-diagonal and right/left bases. 

On the other hand we can also express the expectation 
values in terms of the density operator as 



(^i) = Tr[pSi] 
{S2) = Tr[pSi] 
03) = Tr[pSi] 
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(28) 



where — {I\p\J) are the elements of the density ma- 
trix p representing the density operator in the H /V basis. 
Equations 1)28(1 are obtained using the ket representation 
of the Stokes operators given in equation H26|) . Combin- 
ing equations H27|l and (|28|l we can obtain all the elements 
of the density matrix in terms of the Stokes operators ex- 
pectation values and hence in terms of count rates. The 
density matrix contains all the information about the po- 
larization state of the photons and properties such as the 
purity of the state are readily extracted. A question often 
asked is how similar the experimentally produced state, 
/5, is to some pure target state \4>). A common measure 
of this is the fidelity, _F, given by 



F = 



'\P\' 



(29) 



which is easily found in terms of the matrix elements of 
p. This technique can be extended to two, or more, pho- 
tons by considering the expectation values of products of 
Stokes operators of each photon. For example 

(<5'i,a<5'i,f,) = Phhjih — Phv,hv — Pvh,vh + Pvv,vv (30) 

where a, b label the two photons and pij,ki — 
By considering the expectation values of all the differ- 
ent combinations of Stokes operator products the two 
photon density matrix can be characterised. Whilst 4 
measurements are needed to completely characterise a 
single photon, 16 measurements are needed in general 
for two photons. Of course if the two photons are known 
to be in a separable state then 4 measurements on each 
individual photon will suffice to characterise the state. 
The greater number of measurements needed to charac- 
terise entangled states points to their increased complex- 
ity. The exponential increase in measurements required 



10 



as a function of photon number continues with three pho- 
tons requiring 64 measurements and so on. 

The above techniques were developed and appUed by 
White and James et al [t^ , [zj ■ One problem that arises 
is that, due to experimental errors, the density matrix 
produced from the data may be unphysical. To deal with 
this, maximum likelihood techniques were applied such 
that the "closest" physical density matrix to the data 
can be identified [Tlj . 

An unknown process can also be characterized by to- 
mographic techniques . An arbitrary single qubit pro- 
cess takes an input state p to an output state p' . This 
can be written quite generally in terms of the Stokes op- 
erators as 

/5' = ^ WijSipSj (31) 

where we have introduced the Stokes identity operator: 
= \H){H\ + \ V){V\. The coefficients, Wij, form a ma- 
trix that completely describes the process. The process 
matrix can be determined from the expectation values of 
the Stokes operators evaluated for a complete set of input 
states. As a result 16 mesurement settings are required 
for single qubit process tomography, these techniques 
can be generalized to multi-qubit processes with a corre- 
sponding exponential increase in the number of measure- 
ments required. The process matrix corresponding to a 
CNOT gate is shown in Fig^ An experimental demon- 
stration of process tomography on a two qubit circuit has 
been implemented in optics by O'Brien and Pryde et al 



IV. QUANTUM KEY DISTRIBUTION 

Perhaps the most straightforward application of quan- 
tum information technology is in the field of secure com- 
munications. It is referred to variously as quantum 
key distribution (QKD), quantum cryptography or some- 
times quantum key expansion and was initially proposed 
by Bennett and Brassard ,4]- The idea is to set up a 
communication channel which is secure in the sense that 
any attempt to eavesdrop on the communication can be 
detected after the fact. The channel is used to send a ran- 
dom number encryption key between two parties, usually 
referred to as Alice (the sender) and Bob (the receiver). 
The parties then check if an eavesdropper, called Eve, in- 
tercepted any information about the key. If no Eve was 
present they can proceed to use the random number key 
to encrypt secret messages. If they find an Eve is present 
they scrap that key and try again. 

Actually in any practical situation there will always be 
some errors in the transmission due to imperfections in 
the system. Thus what Alice and Bob do in practice is 
to set limits on the amount of information that Eve can 
have obtained based on the error rate they observe. Pro- 
vided this error rate is sufficiently small, post processing 
of the data using techniques called error reconciliation 
and privacy amplification [t^I can be used to produce a 
shorter secret key. Eve's information about this shorter 
key can be made vanishingly small. Another important 
caveat is that Alice and Bob must initially share some 
secret information which they can use to identify each 
other. Otherwise Eve can fool them by pretending to be 
Bob to Alice and vice versa. Given these conditions QKD 
is provably secure [t^I- No comparable result exists for 
classical communications. 
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FIG. 4: Process matrix in the Stokes (equivalently Pauli) 
basis of the two qubit entangling gate the CNOT. Red = 
-1-0.25; yellow = -.25; black = 0. 



A. QKD using Single Photons 

QKD's ability to detect eavesdroppers is based on the 
fact that any process which acquires information about 
an observable of a quantum mechanical system inevitably 
disturbs the values of other non-commuting observables. 
To illustrate this consider the situation in which Alice 
is trying to communicate zero's and one's to Bob using 
polarized photons. First suppose Ahce sends out a "zero" 
encoded as a horizontally polarized photon, \H). Eve 
measures in the horizontal/vertical basis and obtains the 
result "zero" and so sends a horizontally polarized photon 
on to Bob who will definitely get a zero if he measures 
in the horizontal/ vertical basis. However, now suppose 
Alice and Bob switch to encoding in the diagonal/anti- 
diagonal basis without Eve knowing. Alice sends a zero as 
a diagonally polarized photon, \D) = {1/V2){\H) + \V)). 
Eve still measures in the horizontal/ vertical basis and so 
has a 50/50 possibility of getting either zero or one as 
the result, regardless of what Alice sent. Further more, 
what Eve sends on to Bob is basically the mixed state 
p = 1/2{\H){H\ + \V){V\). So when Bob measures in 
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the diagonal/anti-diagonal basis he also gets a random 
result. Thus, by measuring in the wrong basis, not only 
does Eve potentially get the wrong result, but she also 
completely erases the qubit value which is sent on to Bob 
who then may also get the wrong result. 

The trick then is to arrange a situation in which Eve 
does not know in which basis the information on any 
particular photonic qubit has been encoded because then 
she is bound to make mistakes which Bob will be able to 
detect. A typical protocol would go as follows: 

1. Alice sends a random number sequence to Bob, 
encoded on the polarization of single photons. 
She randomly swaps between encoding on the 
horizontal/vertical basis and encoding on the 
diagonal/anti-diagonal basis. 

2. Bob measures the polarization of the incoming pho- 
tons and records the results, but he also swaps ran- 
domly between measuring in the horizontal/vertical 
basis and measuring in the diagonal/anti-diagonal 
basis. 

3. After the transmission is complete Alice and Bob 
communicate on a public channel. First Bob an- 
nounces which basis he measured for each trans- 
mission event. Alice tells him whether or not this 
corresponded to the basis in which she prepared 
the photon. They discard all transmission events 
for which their bases did not correspond. 

4. Bob then reveals the bit values he measured for 
a randomly selected subset of the remaining data. 
Alice compares the values revealed by Bob with 
those she sent. Inevitably there will be some errors 
in the transmission. If this error rate is below a 
certain threshold then reconcilliation and privacy 
amplification can be employed to distill a secret key. 
If there are too many errors the data is discarded 
and they try again. 

The first experimental demonstration of QKD was car- 
ried out by Bennett and co-workers in 1992 over a dis- 
tance of centimetres {75j . Demonstrations over distances 
of tens of kilometers were first carried out by Hughes 
et al in free space and by Gisin et al in fibre (4*^ . 
Typically highly attenuated lasers are used as the qubit 
source. Switching between the four input states may be 
achieved through electro-optic control or via the passive 
combination of four separate laser sources. In all cases 
it is crucial that the spatial and temporal modes of the 
four input states are identical so that no additional in- 
formation is leaked to Eve. The receiver station can be 
a passive arrangement. A 50/50 beamsplitter is used 
to randomly send the incoming photons cither to a hori- 
zontal/vertical analyser or a diagonal/anti-diagonal anal- 
yser. 

To increase the signal to noise of the detection sys- 
tem the detectors are gated, only opening for the one 
nanosecond or so window in which the single photon 



pulse is expected. Synchronization may be arranged via 
bright timing pulses preceding the single photon pulses or 
via more standard public communication links. Sophisti- 
cated reconciliation and privacy amplification algorithms 
then need to be implemented over the public channel. 

The main motivation for free space systems is to trans- 
mit secret keys to satellites securely. For terrestrial sys- 
tems transmission through fibre optic networks is more 
desirable. Although this has the advantage of less stray 
light, it has the problem that optic fibre is birefrin- 
gent and hence polarization encoded qubits can become 
scrambled. One solution is to go to the temporal mode 
qubit encoding. For example one could use the non- 
commuting encodings 

|0) = |T1) + |T2) 

|1) ^ \T1)-\T2) (32) 

and 

1+) EE \Tl)+i\T2) 

I-) EE \Tl)-t\T2) (33) 

where \Ti) represents a single photon occupying a tempo- 
ral wave packet centred at time Ti. Alice could produce 
the state \T1) + |T2) by allowing a single photon pulse 
to pass through a Mach Zehnder interferometer with un- 
equal arm lengths, in particular where the arm length 
difference is Tl — T2. The other states are created in a 
similar way but where an additional phase of tt (for the 
state |T1) - \T2)) or 7r/2 or 37r/2 (for the other basis 
states) is added to one arm of the interferometer. Unfor- 
tunately, a readout by Bob would require him to have an 
interferometer which is phase-locked to Alice's , some- 
thing that is difficult to arrange. An elegant solution 
to this problem is for Bob to first send a bright pulse 
to Alice This pulse acts as a phase reference, thus 
avoiding the locking issue. 

A limit on the secure key rates occurs with the use of 
attenuated laser sources. The initial intensity cannot be 
too great otherwise the probability of two-photon events 
will be too high. Eve can use two photon events to ex- 
tract information about the key without penalty. One 
solution to this problem is to use a true single photon 
source (see section IlII Dll . Beveratos et al. (G^ were the 
first to demonstrate such a scheme. They used the fluo- 
rescence from a single NV colour centre inside a diamond 
nano-crystal at room temperature as their single photon 
source. 

The QKD protocol we have discussed here is called 
BB84. Many other protocols have been proposed and 
demonstrated and new protocols and demonstrations ap- 
pear regularly ^Jl- Initial steps to commercialization 
have already been taken. 

B. QKD using Continuous Variables 

An alternative approach to QKD is to use non- 
commuting continuous variables such as the in-phase and 
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out-of-phase quadratures. We saw in section that in- 
formation can be encoded on the quadrature amphtudes 
and read out using homodyne detection. We now exam- 
ine the use of these techniques for QKD. 

Recah the basic mechanism used in QKD schemes is 
the fact that the act of measurement (by Eve) inevitably 
disturbs the system. This measurement back-action of 
course also exists for continuous quantum mechanical 
variables. In particular let us consider the situation in 
which Alice sends a series of weak coherent states to 
Bob whose amplitudes are picked from a two-dimensional 
Gaussian distribution centred on zero. Bob chooses to 
measure either the in-phase or out-of-phase projections 
of the states onto a shared local oscillator using homo- 
dyne detection. Bob will effectively see a Gaussian dis- 
tribution of real amplitude coherent states when he looks 
in-phase and a Gaussian distribution of imaginary ampli- 
tude coherent states when he looks out-of-phase. Alice 
can encode two different random number sequences on 
the two. Because the two quadrature measurements do 
not commute Eve now has a similar problem as in the 
discrete case: any attempt to extract information about 
one quadrature from the beam will inevitably erase infor- 
mation carried on the other quadrature. If Alice and Bob 
compare some of the data at the end of the protocol they 
will thus notice increased error rates as a result of any 
intervention. This protocol was developed b y G rosshans 
and Grangier [t^ based on earlier wor k [l8Ll43l and has 
been developed considerably since [7^ l80l ISlj . Security 
proofs for coherent state protocols are based on various 
reasonable assumptions however, a proof of absolute se- 
curity on par with those made in the discrete case has 
only been made for a somewhat different continuous vari- 
able protocol based on squeezed states js^- 

Coherent state QKD can be implemented either by 
sending very weak coherent pulses of light or by sending 
bright, quantum limited light with in-phase or out-of- 
phase amplitude modulation playing the role of the co- 
herent states. The first in principle experimental demon- 
stration of this technique was performed by Grosshans et 
al. using the former technique. Recently the latter 
technique has been employed |84ll85l |. In the experiment 
of Lance et al [s^ end to end key exchange in the pres- 
ence of 90% loss was achieved with a secret key rate of 
IKbit/s with a 17MHz bandwidth. Since this scheme 
is truly broadband, it can potentially deliver orders of 
magnitude higher key rates by extending the encoding 
bandwidth with higher-end telecommunication technol- 
ogy 



V. QUANTUM TELEPORTATION 

We have seen that quantum communication can be 
more secure than classical communication. When en- 
tangled states are allowed a number of new enhanced 
communication and processing tasks become possible. 
This is quite remarkable given that entanglement is undi- 



rected and carries no information itself. For example, in 
the presence of entanglement, the classical capacity of 
a quantum channel (ie the ability of a quantum system 
to carry classical information) is increased. This is called 
quantum dense coding and has been described both in the 
discrete [s^ and continuous domains [s^ Islj . In prin- 
ciple experimental demonstrations have also been made 
in both domains 89, 90]. Another example is quantum 
state sharing. Here an unknown quantum state can be 
distributed between n parties in such a way that if m 
of the parties collaborate (where m < n), then the state 
can be retrieved, but less than m parties can not retrieve 
the state. Again both discrete and continuous 
protocols are known and an experimental demonstration 
has been made in the continuous case [93j |. 

Perhaps the most surprising (and most useful) of such 
tasks is quantum teleportation 0. Here the presence 
of entanglement enables Alice to send Bob an unknown 
qubit by simply sending a classical message. To under- 
stand the novelty of this consider first what Alice can do 
in the absence of entanglement. Her best strategy is to 
measure the qubit in some basis and send a message that 
tells Bob to make a qubit corresponding to the result she 
gets. Sometimes she will be lucky and will measure in a 
good basis, then Bob will make a close approximation to 
the qubit. Other times she will measure in a bad basis 
and the result she gets will be completely random and 
Bob will make a poor approximation to the qubit. It can 
be shown that on average the fidelity of Bob's qubit with 
Alice's original is 2/3. 

If they share entanglement they can perform telepor- 
tation. This works in the following way: Alice and Bob 
share an entangled pair of qubits, say |0)a|0)b + |l)Q|l)fc 
where the subscripts indicate the party that has the 
qubit. Alice also has a qubit in the arbitrary state 
/i|0)a' + iy\l)a' which she wishes to send to Bob. Al- 
ice does not know the state of her qubit. If we write 
down the state of the three qubits and then rearrange 
it we notice a remarkable feature: Bob's qubit can be 
represented as an equal superposition of four states, each 
differing from Alice's unknown qubit by at most a bit-flip 
and a phase-flip. 

i^,\0)a' + ,y\l)a')i\0)a\0)b+\l)a\l)b) 

= (|0),,|0)a + |l)a'|l)a) (a* 1 0) + l)b) 
+ {\0)a'\0)a~\l)a'\l)a) (m|0) h - 1) fc) 
+ {\0)a'\l)a + \l)a'\0)a) (/l| 1) h + J^|0) fc) 
+ i\0)a'\l)a-\l)a'\0)a) (m| 1) 6 - i^|0) h) 

(34) 

What is more, each of Bob's outcomes corresponds to 
distinct 2 mode states on Alice's side. Thus Alice can 
tell which of these four states Bob actually has by mak- 
ing measurements in the so-called Bell basis of her two 
qubits, explicitly: 

1. 10+) - |0>a|0>,, + |l),|l),,, 

2. + ) = \l)a\0)a' + \0)a\l)a', 
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4. |V-) = |l)a|0)a'-|0),|l)a', 

If the result of Alice's Bell measurement is \4>'^) she tells 
Bob not to do anything, if it is \(t>~) she tells him to do 
a phase-flip, if it is j^''") a bit-flip is required and finally 
if she measures she tells him to perform both a bit 
and a phase- flip. In the end Bob has turned his qubit 
into an exact copy of Alice's original but all Alice has 
sent is a two bit classical message. 



A. Teleportation of single photon qubits 

The key ingredients for a demonstration of teleporta- 
tion are the ability to produce entangled Bell States and 
to measure in the Bell basis. Both of these things can 
be achieved non-deterministically in optics. Down con- 
version (see section IIIip can be run in such a way as to 
produce polarization entangled photon pairs. As shown 
by Kwiat el al, this can be achieved either in a type 
I or type II 0| scenario. In both cases the basic 
idea is to overlap output modes in such a way that the 
photon pairs can either be comprised of two horizontal 
photons or two vertical photons but are otherwise com- 
pletely indistinguishable (for type II the polarisations are 
anti-correlated) . This leads to an output state that can 
be written 



Polarization 
Discriminating 
Plioton 
Counter 1 



\m)+X{\H)a\H)a'+e:'\V)a\V)a' 



(35) 



where we assume x << 1 and so ignore higher order 
terms. The phase 9 can be tuned experimentally. By 
tuning = and working in coincidence, the maximally 
entangled Bell state, \<j)'^), can be post-selected. 

Partial Bell state measurements in the polarization ba- 
sis can be achieved with the beamsplitter and photon 
counter arrangement shown in Fig|Sl 95, 96] . The mea- 
surement projects onto the basis states \<t)^), \HV), 
\VH). We see that in half the cases we project onto Bell 
states and so can achieve teleportation. The other half 
of the time we make a separable measurement of the in- 
dividual values of the qubits, and so teleportation fails. 

The first demonstration of teleportation using these re- 
sources was by Bouwmeester et al. at the University of 
Innsbruck |97j . Their experiment used pulsed UV pump- 
ing of a non-linear crystal in a type II arrangement to pro- 
duce pairs of polarization entangled photons at 788 [nm] 
(2 and 3). The pump pulse was then retro- reflected 
through the crystal such that a second pair of counter- 
propagating photons (1 and 4) might be produced. Tele- 
portation could then proceed by giving Alice entangled 
photon 2 and photon 1 as the teleportee (after it had 
been prepared in some arbitrary state) and giving Bob 
entangled photon 3. The fourth photon could be used as 
a trigger. 

A simpler form of the partial Bell measurement was 
implemented by passing photons 1 and 2 through a 50/50 




Polarization 
hwp Discriminating 
22 5 Photon 

Counter 2 



input 2 



FIG. 5: Schematic of a partial Bell state analyser. The po- 
larization discriminating detectors would be constructed from 
additional polarizing beamsplitters (PBS) and photon coun- 
ters in practice. If we find a single photon at each output and 
the polarization of the photons at each output are the same 
then the Bell state has been identified. If the polariza- 
tion of the photons at each output are different then \(j>^) 
has been identified. If both photons are found at the top de- 
tector then the separable state \HV) has been identified. If 
both photons are at the bottom port then the separable state 
\VH) has been identified, hwp is a half- wave plate at the 
angle indicated. 



beamsplitter and then photon counting at the outputs. 
The action of a beamsplitter on the Bell states is to make 
the photons bunch (i.e. both exit through the same port). 
For all the Bell states that is except 1^/"— ), for which 
case the photons always exit by different ports. Thus if 
Alice records a coincidence count at the output of the 
beamsplitter then she has unambiguously identified the 
IV'—) Bell state and teleportation has succeeded. The 
experiment is arranged such that the |V'— ) state is the 
"do nothing" result. If she does not obtain a coincidence 
the protocol has failed. 

This experiment was very technically challenging. The 
probability of four photon events was very low. To pre- 
vent any temporal distinguishability of photons 1 and 2, 
a frequency filtering producing a 4[nm] bandwidth was 
applied, further reducing the counts. Finally the proto- 
col itself only succeeded one quarter of the time. This 
resulted in roughly one successful event per minute. The 
fidelity with which the original states were reproduced 
was about 70%. 

A sublety of the original experiment was that there 
was a significant probability for the down-converter to 
produce two photons each in modes 1 and 4. Then, even 
under perfect conditions of zero loss, a three-fold coinci- 
dence on Alice's side of the experiment does not guaran- 
tee a photon is sent to Bob. In a later manifestation of 
the experiment the possibility of such errors was made 
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negligible and fidelities of > 80% were observed, well in 
excess of the 2/3 limit 92]. 

Teleportation can also be performed on single rail 
qubits. Here the Bell state can be produced by simply 
splitting a single photon on a 50:50 beamsplitter to give 
|0)|1) + |1) |0). A Bell measurement is achieved also with a 
50:50 beamsplitter and can successfully identify the two 
Bell states |0)|1) ± |1)|0)- Again the other possibilities 
(two photons at one output) result in the measurement 
of the logical value of the qubit. A demonstration of sin- 
gle^ rail teleportation was carried out by Lombardi ct al 

Teleportation of coherent state qubits is also possi- 
ble and has the unique property that deterministic Bell 
state analysis can be carried out with just a beamsplitter 
^^tMj (provided the coherent states are sufficiently sep- 
arated to be considered orthogonal, see section lTil Bll . No 
experimental demonstration of this type of teleportation 
has yet been carried out. 

As well as a method for quantum communication, all 
these types of teleportation can also be applied to quan- 
tum computation as will be highlighted in section IVTI 
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FIG. 6: Schematic of continuous variable teleportation. In 
(a) is depicted the best strategy in the absence of entangle- 
ment. In (b) entanglement (E) is included in the protocol. 
Homodyne detection measures the in-phase and out-of-phase 
quadratures at Alice's station. The results of the measure- 
ments are fed-forward to displace (D) Bob's field. 



B. Continuous Variable Teleportation 

So far we have considered teleportation of qubits, as 
carried by the polarization degree of freedom of single 
photons. This technique will only work for single photon 
states. What if we wish to teleport a general field state 
with contributions from vacuum and higher photon num- 
ber terms? The answer is to implement a teleportation 
protocol based on the measurement of the quadrature 
amplitudes of the field. Because the quadrature ampli- 
tudes are continuous, rather than discrete, variables, this 
is known as continuous variable (CV) teleportation. It 
was developed by Brauns tein and Kimble |l3 based on 
earlier work by Vaidman |100| |. 

Consider the situation depicted in FigE^a). Alice 
wishes to teleport to Bob an unknown coherent state, 
I a), drawn from a broad Gaussian distribution. In the 
absence of entanglement Alice's best approach is to di- 
vide the field into two equal parts at a beamsplitter and 
then measure the in-phase quadrature of one half and the 
out-of-phase quadrature of the other. The in-phase mea- 
surement gives an estimate of the real part of a, whilst 
the out-of-phase measurement gives an estimate of the 
imaginary part of a, however both estimates are imper- 
fect due to noise from the vacuum field which inevitably 
enters through the open port of the beamsplitter. Alice 
sends these estimates to Bob who uses them to produce 
a coherent state by displacing his local vacuum state by 
the relevant quantities. 

This situation is most easily described in the Heisen- 
berg picture. Let the initial field mode be represented by 
the annihilation operator a and the vacuum entering at 
the 50:50 beamsplitter by ui. The measurement results 
obtained by Alice are then represented by the quadrature 



operators 

K = -^iX-+X~,) (36) 

where -f (— ) signifies the in-phase (out-of-phase) quadra- 
ture. These are sent to Bob who uses them to displace 
his vacuum field, U2 giving the output field 

ao = U2 + g\{Xt + iX-) - .gi(X+ - zX- ) (37) 

where g is a gain factor for the displacement. Choosing 
g = 1, unity gain, Bob's output field is 

flo — a + {t2 ~ (38) 

Notice that two vacuum fields have been added to the 
output, one entering through Alice's measurement, the 
other through Bob's reconstruction. Measurement of 
Bob's quadrature amplitudes will show the same average 
value as Alice's input: (X^) — (X^) ^ the vacuums 
have zero mean. On the other hand the quadrature vari- 
ances of Bob's state will be larger than the initial state: 

Vao - ((X± )2) - (1± )2 

= ((X±)2) + ((X± )2) + ((1± )2) _ ^x±^2 

= 3 (39) 

As a result Bob's state is mixed (no longer minimum 
uncertainty) and is 3 times noisier than the QNL level of 
the input coherent state. 
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Now suppose Alice and Bob share an entangled state. 
In partic ular we assume they share an EPR entangled 
state [2E llOlj named after the famous paradox proposed 
by Einstein, Podolsky and Rosen js^l- This state, also 
commonly known as a two mode squeezed state, exhibits 
strong correlations between both the in-phase and out- 
of-phase quadratures of its component beams. It can be 
described by its Heisenberg evolution: 



■ill VG ill + VG — 1 ii\ 
112 VGu2 + VG- 1 u\ 



(40) 



where iii are initially vacuum states and G is the para- 
metric gain (or squeezing). This interaction is produced 
by parametric amplification [3fil | either directly by a non- 
degenerate system or alternatively via degenerate para- 
metric amplification (ie squeezing) followed by the out-of- 
phase mixing of the two modes on a 50:50 beamsplitter. 
A non-degenerate parametric amplifier is basically just a 
high efficiency down converter as can be seen from the 
Scrddinger picture evolution equivalent to Eg 1401 



\EPR) ^ (|0)i|0)2 + ^^^|l>i|l)2 



\ VG 



|2>i|2)2 



(41) 



Alice again divides and measures her beam but this time 
instead of allowing vacuum to enter the empty port of 
her beamsplitter she sends in her half of the EPR pair. 
As a result her quadrature measurement results are now 
given by 

1 



X+ = — (X+-VGX+ -VG^X„^ 



X- = —{X-+^GX-,-^/G^X-^) (42) 

where we have used equation H40(l to describe the entan- 
glement. These results are sent to Bob who now uses 
them to displace his half of the EPR pair, obtaining (at 
unity gain) 



a+(VG- VG^)fi2 + (VG- VG~T)uti (43) 



Now in the Umit G ^ 00, (vG - ^/(T 
this limit equation 14311 reduces to 



0. hence in 



(44) 



Evolution through the teleporter is the identity and so 
the output state is identical to the input (this is obviously 
true not only for the coherent input states we have been 
considering but for any input state). 

The first de mons tration of this type was made by Fu- 
rusawa et al. |102| . EPR entanglement was produced 
by the mixing of two out-of phase squeezed beams on a 
50/50 beamsplitter. Both squeezed beams (at 860[nm]) 



were generated in a single ring-cavity parametric oscilla- 
tor by simultaneously pumping counter-propagating cav- 
ity modes. One of the EPR beams was sent to Alice 
who mixed it with her signal beam and performed dual 
balanced homodyne measurements, actively locked to be 
90 degrees out of phase, such that conjugate quadrature 
measurements were made. The photo-currents thus gen- 
erated are sent to Bob who uses them to impose phase 
and amplitude modulations on a bright laser beam. By 
mixing this bright beam with his EPR beam on a highly 
reflective beamsplitter Bob can efficiently impose on the 
EPR beam a displacement proportional to the modula- 
tions. All the beams in the experiment originate from a 
single Ti:Sapph master laser, including the signal beam 
which has a known modulation amplitude (effectively the 
coherent amplitude of the coherent state) imposed on it 
before being sent to Alice. When, based on the signal 
size observed on Bob's side, unity gain was achieved, the 
quadrature noise floors of the teleported beam were mea- 
sured by an independent balanced homodyne detector, 
both with and without entanglement. 

The quality of Bob's reconstruction can be evaluated 
via the fidelity of it compared with the initial coherent 
state Alice sent (see Ea l29|) . Provided the output is Gaus- 
sian (which it is) this fidelity is given by 



F 



X exp 



{V+ + l){Vao + l) 



-.\a\\l-gf 



(45) 



Recalling from our earlier discussion that without en- 
tanglement the quadrature variances of the outputs are 
^ao = ^ao — 3i then we find from equation H45|l that for 
large a the best fidelity with no entanglement is achieved 
at unity gain and is F = 0.5. This is confirmed by Furu- 
sawa et al who find a best fidelity without entanglement 
of Fc = 0.48 ± 0.03. On the other hand, with entangle- 
ment, a fidelity of Fq — 0.58 ± 0.02 is measured, clearly 
exceeding the classical bound. 

A subsequent experiment by Bowen et al JlOSl. 
achieved higher fidelities {Fq = 0.64 ± 0.02) and sta- 
ble operation over long periods. Their experiment used 
two independent, monolithic, sub-threshold parametric 
oscillators to produce twin squeezed beams at 1064 [nm] 
which were then mixed on a beamsplitter to produce the 
required EPR entanglement. 

The performance of the Bowen et al teleporter was 
also characterised in terms of the signal to noise transfer 
(T) and the conditional variance {V) between the inpu t 
and output fields: the teleportation T-V diagram |104| . 
As we have seen, in the absence of entanglement strict 
bounds are placed on both the accuracy of measurement 
and reconstruction of an unknown state. These are rep- 
resented by the vacuum modes that appear in equation 
(|38|l . These bounds can be quantified in the following 
way. 
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Alice's measurement accuracy is limited by the gen- 
eralized unc ertai nty principle of Arthurs and Goodman, 
Vj^Vj^ > 1 |l05l | . where V+m,V^j are the quadrature 
measurement penalties, which holds for any simultane- 
ous measurements of conjugate quadrature amplitudes 
of an unknown quantum optical system. For Gaus- 
sian input states this relationship can be re-written in 
terms of quadrature signal transfer coefficients, T'^ = 
S/N+JS/Ni and = S/N-JS/Nr^ as 



T- -T+ T- 1- 



1 



< 1 



(46) 



where S/N^ (S/N ) is the signal-to-noise ratio of the 
in-phase (out-of-phase) quadratures. This expression re- 
duces to Tq = T+ -|- T~ for minimum uncertainty input 
states {V^V~^ — 1). Without entanglement it is not pos- 
sible to break the inequality given in equation (|46|) . 

Bob's reconstruction must be carried out on a mode 
of the E/M field the fluctuations of which must already 
obey the uncertainty principle. In the absence of en- 
tanglement these intrinsic fiuctuations remain present on 
any reconstructed field, thus the amplitude and phase 
conditional variances, V+^^, = V+, -\{SX+SX+^,)\yV+ 

and V;^|out = K,ut-|('^^i;'^^o"ut>l7^n respectively, which 
measure the noise added during the teleportation pro- 
cess, will satisfy Vq 



K+i V.~, 

in|out in I out 



> 1. For Gaussian 



input states this can be written in terms of the signal 
transfer and quadrature variances of the output state as 



Vq ^ (1 - T+)il - T- 



out out 



> 1 



(47) 



The criteria of equations (|46|) and H47|l can then used to 
represent quantum teleportation on a T-V graph. An 
important feature of the T-V criteria is t hat i t can char- 
acterize teleportation at non-unity gains |l06l | . 

The Tq and Vq bounds have independent physical sig- 
nificance. If Bob's state passes the Tq bound (equation 
(|46|l ') then he can be sure, regardless of how it was trans- 
mitted to him, that no other party can possess a copy 
of the state which also passes this bound (ie carries as 
much information about the original) . Surpassing the Vq 
bound is a necessary prerequisite for reconstruction of 
non-classical features of the input state such as squeez- 
ing or negativity of the Wigner function. Clearly it is 
desirable that the Tq and Vq bounds are simultaneously 
exceeded, thus demonstrating fully quantum operation. 
The cross-over point (1,1), corresponds to a fidelity of 
2/3. The significance of crossing th is bound ary has been 
investigated by a number authors (lOTl Il08l | . Perfect re- 
construction of the input state would result in = 2 and 
Vq = Q. In the Bowen et al experiment a number of results 
were obtained that passed the Tq bound and one point 
(marginally) exceeded both T„ and Vq simultaneously. 

More recently Takei et al | 109| conclusively demon- 
strated passage into the fully quantum region by obtain- 
ing a fidelity of 0.7 and realizing entanglement swapping 
at unity gain. The experiment was carried out with an 



array of 4 parametric oscillators operating at 860 [nm]. 
By combining pairs of beams, 2 strongly entangled EPR 
sources were created. One beam from the first EPR 
source was teleported by the second EPR source. By 
looking for correlations between the teleported beam and 
the other beam of the first source it could be established 
that they were still entangled. The input beam repre- 
sented a good approximation to an unknown state and 
the preservation of entanglement showed that quantum 
features of the state could be successfully transferred. 



VI. QUANTUM COMPUTATION 

We have now examined a number of quantum informa- 
tion tasks that have been achieved using optics. We have 
seen that with some encodings arbitrary control of sin- 
gle qubits can be achieved and specific entangled states 
can be produced and used as resources for small scale 
operations. But what about the more challenging task 
of quantum computation? The skills so far discussed are 
insufficient to implement quantum computation. It turns 
out that to be able to implement arbitrary processing of 
information encoded on a set of qubits it is sufficient to 
possess at least one non-trivial two qubit operation, in 
addition to arbitrary operations on single qubits. 

An example of a non-trivial two-qubit gate is the 
CNOT gate. In terms of polarisation qubits its opera- 
tion is summarised by the following truth table 



\H)c\H)t 
\H)c\V)t 
\V)c\H)t 
\V)c\V)t 



\H)c\H)t 
\H)c\V)t 
\V)c\V)t 
\V)c\H), 



(48) 



When the control qubit is in the horizontal state, |i?)c, 
the value of the target qubit \H)t or \V)t is unchanged. 
However, when the control is vertical, \V)c, the value 
of the target qubit is flipped, horizontal to vertical and 
vice versa. The effect of a CNOT gate on superposition 
states is simply a superposition of the transformations 
of equation (|48|l . For example if the control is in the 
diagonal basis we get the following transformations 



mc + \v).)\H), 

{\H), + \V),)\V), 

mc~\v)c)\H), 
mc-\v).)\v)t 



\H),\H), + \V)^V)t) 
\H),\V), + \V),\H),) 
\H),\H)t-\V)AV)t) 
\H),\V)t-\V)AH),) (49) 



Notice that the resulting output states are the four Bell- 
states, see section (jVj. If we run this interaction back- 
wards, that is input the Bell states, we see that orthogo- 
nal, separable states are outputted, hence enabling ef- 
ficient Bell-state analysis. Thus the CNOT gate is a 
very useful device even for small-scale applications. So 
how might such an interaction between two photons be 
implemented? One solution is to use a non-linear 
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medium to induce a cross-Kerr effect bet ween two plio- 
ton modes, as first suggested by Milburn |ll(]| . Ideally 
the cross-Kerr effect will produce the unitary evolution 
Uk — exp[ixa^a&^&], where d represents one optical mode 
and b another. Consider the schematic set-up of Fig|7| 
Two polarization encoded qubits are converted into spa- 
tial dual rail qubits using polarizing beamsplitters. One 
mode from each of the qubits is sent through the cross- 
Kerr material. The operation of this device on an ar- 
bitrary two qubit input state is given by the following 
evolution: 

IV) ^ Uk\^) 

= e*'^^^'^^^5^Ka|01)a|01)b + /3|10)J10)fc 

-H7|10>a|01>fc + ,5|01)a|10)t) 

= a|01)a|01)b + /3|10),|10)fc 

-|-7|10)j01)6 + e^'^,5|01)a|10)fc 

(50) 

Only when both modes entering the Kerr material are 
occupied is a phase shift induced. If we now choose the 
strength of the non-linearity such that x = tt, the effect 
is to flip the sign of one element of the superposition. 
This is called a controUed-sign (CS) gate. If Hadamard 
gates are placed on qubit 6, before and after the CS gate 
(as could be implemented with wave plates, see section 
nil A|l then CNOT operation is achieved with qubit a as 
the control and qubit h as the target. 



atoms in cavities of extremely high finesse and small vol- 
ume [S^ . This occurs in the so-called strong coupling 
regime, in which the dipole coupling between the cavity 
field and the atom is significantly greater than the relax- 
ation rates of both the cavity and the dipole. Many prob- 
lems exist with this approach including: the difficulty of 
coupling photons efficiently into and out of the cavity 
mode; the need to isolate the cross-Kerr non-linearity 
from other non-linear effects and; the difficulty in main- 
taining a constant coupling strength between the atom 
and the fie ld. A num ber of ingenious solutions have been 
suggested |llll Ill2j but remain unproven experimentally 
to date. 

These problems led most to conclude that large scale 
quantum processing with optics was untenable. How- 
ever a number of results in the late nineties and early 
noughties, culminating in the 20 01 paper by Knill, 
Laflamme and Milburn (KLM) fTTl| led many to change 
their view. KLM found a way to circumvent the problem 
of needing a huge non-linearity and showed that it was 
possible to implement efficient quantum computation us- 
ing only passive linear optics, photodetectors, and single 
photon sources. In the following we will first describe 
how Grover's quantum algorithm can be implemented in 
a straight forward manner using linear optics. We then 
describe KLM's more ambitious scheme for general quan- 
tum computation and the experimental steps that have 
so far been taken. 
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FIG. 7; Schematic of the implementation of an optical CS gate 
using a strong cross-Kerr non-linearity x- PBS are polarizing 
beamsplitters. 

The problem with this idea in practice is that typ- 
ical non-linear materials have values of x that are an 
order of magnitude of orders of magnitude too small. 
One might consider making the interaction region of the 
material very long in order to boost the non-linearity, 
but such a strategy generally leads to very high levels 
of loss, which negate the desired effect. Non-linearities 
close to those required can be realized in cavity quan- 
tum electro-dynamic (QED) situations featuring single 



A. Grover's Algorithm 

Grover's algorithm |13| is an important algorithm in 
quantum computation giving a provable speed-up over 
classical algorithms in searching an unstructured data- 
base. The best classical algorithm for finding a single 
marked item in an unstructured data base is to simply 
randomly sample. On average, it will take N/2 attempts 
to find the item. Quantum information allows a better 
solution which is depicted in Fig. |Hl[a). Dependent on 
the logical state of a qubit bus a quantum oracle samples 
the data base. If the nominated item is found, the qubit 
bus is marked by a phase flip, otherwise the qubit bus 
is left unchanged. By placing the qubit bus in an equal 
superposition of all logical states all the data base states 
can be interogated by a single oracle call. The result is 
an equal superposition output state with a single phase 
flip against the qubit state corresponding to the marked 
item. Inversion about the mean is then performed on the 
qubit bus, which has the effect of amplifying the marked 
item with respect to the others. After iterating this pro- 
cess for order \/iV times the item can found with high 
accuracy by a measurement on the qubit bus in the com- 
putational basis. Although not an exponential speed-up, 
the improvement in search speed can be quite significant 
for large N . In Fig. IHl^b) we show explicitly the smallest 
non-trivial example: a 4 element data base. In this case 
a single iteration is sufficient to determine the marked 
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element with unit probability. 
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FIG. 8: Schematic representations of the implementation of 
Grover's algorithm, (a) General case showing basic flow struc- 
ture. JAM stands for inversion about the mean. The iterative 
step is carried out of order v'^ times, where A'^ is the size of 
the unstructured data base, (b) Specific implementation for 
case of A = 4. The qubits are input in the state |00) and 
the output is measured in the computational basis. The 4 
possible separable output states unambiguously identify the 
4 possible tagged elements with a single query. CS indicates 
a CS gate and H indicates Hadamard gates. 



We will now consider the implementation of Grovers al- 
gorithm in optics. The oracle plays a key role in search al- 
gorithms so we shall begin by describing how, in general, 
a search oracle can be implemented in optics. Initially 
we will assume that CNOT gates operating on the prin- 
ciple of Eq|2n|are available. We will additionally use the 
feature that the action of the gate on an unoccupied (vac- 
uum) target mode leaves both modes unchanged, that is 

ai\H)\0) + a2\V)\0) ^ ai\H)\0) + a2\V)\0) (51) 

where represents the vacuum. We will then show the 
rather surprising result that such gates are not in fact 
required in order to implement Grover's algorithm. 



1. The Oracle 

We require that the oracle, when queried by some n 
qubit state will query the corresponding element of an 
unstructured 2" = TV element classical data-base and 
either return the same n qubit state (if the element is 
not tagged) or a phase flipped version (if the element is 
tagged). We assume the simplest case that only one ele- 
ment is tagged. In order that superpositions of the input 
state should be preserved it is clear that we need a clas- 
sical data-base which can be interogated by a quantum 
particle. Optics provides a straightforward solution to 
this problem. 




CNOTs 



feedforward 



FIG. 9; Schematic of oracle for 4-bit data base. PBS are 
polarising beamsplitters whilst BS are 50:50 non-polarising 
beamsplitters. The dashed line on the beamsplitters indi- 
cates the surface from which reflection induces a sign change. 
Polarising beamsplitters are assumed to reflect the horizon- 
tal component and transmit the vertical component of the 
incident light. Half- wave-plates are indicated by A/2 and are 
oriented at 45 degrees to horizontal, thus flipping the polar- 
ization of the incident beam. Single lines indicate optical rails 
whilst double lines indicate electrical rails. See text for de- 
scription of operation. 



To illustrate the technique we shall begin by consid- 
ering an oracle querying a 4 element data-base. We will 
then generalize the result. The proposed arrangement is 
shown in FigO The classical data-base is comprised of 
a piece of glass partioned into four domains. One of the 
domains (representing the tagged element) has an optical 
pathlength which is A/2 longer than the pathlengths of 
the other domains. Here A is the optical wavelength. 

The principle of the oracle is to direct a single pho- 
ton through one of the four domains as a function of the 
state of a 2 qubit input. If it traverses the tagged do- 
main it will pick up a vr phase shift relative to passage 
through the other domains. Path information carried by 
the single photon is then erased via a measurement pro- 
tocol leaving the phase flip on the corresponding 2 qubit 
state. Because the photon is a quantum particle it can be 
placed into a superposition of traversing various domains 
simultaneously. 

We start with the qubits in an arbitrary superposition 
state and the "oracle photon" in the horizontal state: 

\H){ai\H)\H)+a2\H)\V)+a3\V)\H)+ai\V)\V))i52) 

Here the ordering of the kets from left to right in Eg 1521 
corresponds to the rail sequence from top to bottom in 
Figl^l Next a CNOT gate with the flrst qubit as the con- 
trol and the oracle photon as the target is applied. De- 
pending on the value of the first qubit the polarization of 
the photon is either left alone or flipped to V. The ora- 
cle photon then passes through a polarizing beamsplitter 
which separates the polarization modes into two separate 
spatial paths. We now apply CNOT's with the second 
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qubit as their control and each of the new oracle photon 
spatial modes as targets. Subsequent polarizing beam- 
splitters again divide polarization modes into different 
spatial modes resulting in four different paths that the 
photon can take. Each of the different paths is uniquely 
determined by one of the four possible logical basis input 
states of the qubit. Thus the state of the system has now 
evolved to: 

ai\pi)\H)\H) + a2\p2)\H)\V) 

+ a3\pi)\V)\H) + ai\p3)\V)\V) (53) 

where we have used the \pi) = |1, 0,0,0), \p2) = 
|0, 1,0,0), etc. The oracle photon then passes through 
the glass plate data base. For concreteness we will as- 
sume that it is the first domain which has the increased 
path length, thus the state of the system after the inter- 
action with the data base is 

- ai\pi)\H)\H) + a2\p2)\H)\V) 

+ a3\p4:)\V)\H) + a^lp^WWldi) 

The tag has successfully been attached to the qubit state 
however the oracle photon still carries information about 
the qubit state which must be erased. This could be done 
by reversing the sequence of gates used before the data- 
base as was suggested by Nielsen and Chuang How- 
ever, the need for more quantum gates can be avoided by 
employing a measurement based erasure protocol. This 
is achieved by mixing all the possible photon paths on 
50:50 beamsplitters. There is then an equal probability 
of finding the photon in any of the four paths, thus eras- 
ing the qubit information. The photon is then detected. 
Depending on where the photon is found the following 
phase corrections must be made to the qubits: (i) If the 
photon is counted at detector 1, do nothing; (ii) if the 
photon is counted at the second detector then a phase 
shift (defined by Z\H) ^ \H) , Z\V) = -\V) a.nd imple- 
mentable with a quarter-wave plate) is applied to qubit 
2; (iii) if the photon is counted at the third detector then 
a phase shift is applied to both qubits and; (iv) if the 
photon is counted at the fourth detector then a phase 
shift is applied to the first qubit. After the correction 
has been made the qubits are left (up to a global phase 
factor) in the state 

- ai\H) \H) + a2\H) \V) + a^lV) \H) + ai\V)\V) (55) 

which is the required state. 

This scheme is easily generalized to larger data-bases. 
For example to search an eight element data-base we re- 
quire a three qubit register and a glass plate with eight 
domains. The first two steps of the protocol run the same 
as before with the photon being fanned out to four dif- 
ferent paths. Now four CNOT's, all controlled by the 
third qubit and with the four photon paths as their re- 
spective targets, direct the oracle photon into eight possi- 
ble paths, each uniquely determined by the qubit values. 
The paths are passed through the data-base, resulting 



in tagging, and the qubit information is erased by mode 
mixing followed by detection in an analogous way to the 
four element protocol. It is clear that the scheme can 
be further expanded in this way to any finite sized data- 
base. In general the oracle will require {N — 1) CNOT 
gates where = 2" is the data-base size and n is the 
number of qubits in the register. 



2. Graver's Algorithm with Linear Optics 

In the previous section we showed how a search oracle 
could in general be implemented in an optical quantum 
computation circuit, given a cross-Kerr type two-qubit 
gate. We now consider the specific case of Grover's algo- 
rithm and show that in fact the entire algorithm can be 
performed using only linear optics. 

Consider the initial interaction between the qubit bus 
and the oracle. In Grover's this step is used to instruct 
the oracle to make an equal superposition query of all 
data base elements. However, this can be achieved using 
only linear optics by simply fanning out a single photon 
mode into N modes using 50:50 beamsplitters. After the 
oracle the result is read to the qubit bus for the process- 
ing step of inversion about the mean. After processing 
it is read back to the oracle that then queries the data 
base again. But actually it is unnecessary to read the 
information back to a qubit bus in order to pe rform the 
processing. As shown by Kwiat and Zeilinger |ll4j . any 
unitary operation can be performed on a unary data bus 
using only linear optics. A unary data bus is one in which 
a particular number, n, is represented by having the nth 
bit fiipped with respect to all the others. For the opti- 
cal bus this is represented in single rail logic (see section 
nil B|l by having only the nth mode occupied by a single 
photon. This is in contrast to a binary data bus in which 
n would be represented by the binary digit nbase2- 

In a general quantum computation circuit such a unary 
encoding would lead to an exponential expense in the 
number qubits needed in comparison to a binary encod- 
ing and would in most cases quickly nullify any gain made 
through the quantum approach. However, for the specific 
case of a search algorithm like Grover's, it is a required 
step to introduce a unary qubit bus in order that the 
unstructured data base can be queried. It is thus of no 
benefit to continually shift back and forth between the 
binary and unary qubit buses and is just as efficient to 
remain in the unary qubit bus and perform all the pro- 
cessing using linear optics. 

A number of groups have performed in principle 
demonstrations o f Gro ver's algorithm using linear op- 
tics. Kwiat el al Ill5| searched a 4 element data base. 
They used a combination of polarization and spatial en- 
coding to form the unsorted data bus and a Sagnac 
interferometer to form a passively stable interferomet- 
ric arrangement. The data base was electro-optically 
"programmed" via waveplates and a Pockell cell. They 
achieved around 90% probability of successfully identify- 
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ing t he marked data base element. Bah attac harya et al 
|ll6j | , motivated by a proposal of Lloyd |ll7j , were able 
to search up to a 32 element data base, represented by 
a thin groove in glass plate. They used a standing-wave 
cavity to achieve repeated interactions with the data base 
and Fourier optics to produce the required inversions 
about the mean. 

In neither of these experiments were single photon 
states used. Rather, bright optical pulses containing 
huge numbers of photons passed through the systems. 
Although in the case of the Kwiat experiment it would 
have been reasonably straightforward to run the experi- 
ment with single photons |118j , a significantly more diffi- 
cult set-up would be required to allow the Bahattacharya 
experiment to be run with any reasonable efficiency in 
the single photon domain. This prompts the question of 
whether, if the basic effect of Grover's algorithm is ob- 
servable with bright beams of light, the algorithm should 
be considered "quantum". We now briefly address this 
question. 

3. Is Grover's Algorithm Quantum? 

In order to answer the question "Is Grover's Algorithm 
Quantum?" we first need to define what we mean by "a 
single query of the data base" and what we mean by 
"quantum". We will adopt the following definitions: 

1. A single query of the data base occurs when, on 
average, a single photon interacts with the data 
base. 

2. The algorithm will be considered quantum if it is 
necessary for entanglement to exist between the op- 
tical modes comprising the unsorted data bus in 
order to achieve the \/N scaling. 

Notice that by this definition neither of the experiments 
so far performed strictly realized Grover's algorithm as 
both involved many photons interacting with the oracle 
per query. We now consider three examples that satisfy 
the query definition, two of which involve entanglement 
and one of which does not. 

Firstly, the implementation of the oracle represented 
in Fig. clearly satisfies the query definition and also 
produces a y/N scaling. The state of the data bus just 
before the first interaction with the data base is 

\ip) = |100...00> + |010...00> + I000...01) (56) 

which clearly exhibits modal entanglement. 

Can we remove the entanglement and still retain the 
•\/7V scaling. As a second example we could consider us- 
ing a weak coherent state with amplitude a = 1 as the 
input instead of a single photon state. We still satisfy 
the query requirement on average and the algorithm still 
achieves a ^/N scaling. Because we are using a weak 
coherent state there is a 37% probability for any particu- 
lar query that we will inject vacuum into the circuit and 



hence get a null result. However this efficiency is con- 
stant, independent of the size of the data base and thus 
does not affect the scaling. Is there still entanglement 
present? At first sight the answer to this question may 
appear to be " no" , as the unitary evolution of a coherent 
state through a beamsplitter does not produce entan- 
glement. However the photon counters used to detect 
the final state have microscopic resolution and reject the 
vacuum state realizations. As a result, on the occasions 
the algorithm succeeds, the detectors post-select circuit 
states similar to that in Eg 1561 Again, entanglement is 
seen to be present. 

To avoid both unitary and post-selected entanglement 
we consider a third example in which again we use a weak 
coherent state with amplitude a = I as the input but now 
use homodyne detection of the final state. Homodyne 
detection measures the field amplitude and so does not 
resolve individual quanta. As a result it cannot post- 
select entanglement from coherent state inputs. Now the 
state of the data bus just before the first interaction with 
the data base is 

\tp) ^\a',a',...,a') (57) 

where a' = 1/Vn. EqEI is clearly a separable state. 
The output state after the correct number of iterations 
will be approximately 

|V)ont = |0,0,.., 0) (58) 

where the mode position of the displaced state gives the 
marked element. However, using homodyne detection 
means that there is vacuum noise associated with the un- 
occupied modes meaning we cannot unambiguously iden- 
tify the marked element. Indeed the signal to noise with 
which we can identify the correct element is now 1/N. In 
order to maintain a constant signal to noise, say of 1, we 
need to repeat the algorithm \/N times. As a result we 
find that the number of data base queries scales with N 
in this case, just as for the classical algorithm. Given our 
energy constraint it is hard to imagine how this problem 
can be avoided whilst still maintaining separable states. 

These examples suggest strongly that, given our defi- 
nitions, Grover's algorithm should be considered a quan- 
tum algorithm not-with-standing its classical field ana- 
logues. 

B. Linear Optical Quantum Computation 

As we have already mentioned, it is not possible to 
construct a general quantum computation network using 
the unsorted encoding scheme without incurring an ex- 
ponential overhead. In the following we will describe the 
scheme of KLM, in which the standard dual-rail qubit 
encoding is used, but arbitrary processing is achieved 
without Kerr type non-linearity or an exponential over- 
head. Instead the KLM toolbox comprises: single pho- 
ton sources; photon counting detectors and; electro-optic 
feed-forward. 
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There are three tiers to the KLM scheme: 



1. Non-deterministic two qubit gates which can be 
used to produce entangled resource states. 

2. Non-deterministic teleportation gates which are 
driven by entangled resource states and fail by ac- 
cidentally measuring the value of the qubit. 

3. Error correcting codes that protect the qubits from 
accidental measurement during the application of 
the teleportation gates and hence allow scale up of 
universal circuits without an exponential overhead. 

We now discuss each of these tiers in turn and the exper- 
imental progress that has been made towards quantum 
computing based on this paradigm. 



1. N on- Deterministic Entangling Gates 

At the first level, KLM introduced two qubit gates that 
could take separable, single photon inputs, and produce 
entangled outputs. In particular KLM showed how to 
make a CNOT gate that was non-deterministic, but her- 
alded. That is, the gate does not always work, but an 
independent signal heralds successful operation. A some- 
what simplified version of this gate is shown in Fig. Hl()(l 
pl9j. In addition to the single photon, polarisation 
qubits incident at ports c (control) and t (target), the 
gate also has ancilla inputs comprising two vacuum in- 
put ports, vl and v2, and two single photon input ports, 
pi and p2. The beamsplitter reflectivities are given by 
771 = 5 — 3V2 and r?2 = (3 — V2)/7. It can be shown 
that when no photons are detected at outputs vol and 
vo2, and one and only one photon is detected at each 
of pol and po2, then the gate has succeeded and the 
photon qubits exiting through co and to have had the 
CNOT transformation applied to them. The probability 
of successful oper ation is 77I w 0.05. Recently it has been 
proved by Eisert |l20j | that 1/16 is the upper bound for 
success probability for a gate of this type (as achieved by 
the original KLM proposal). 

Even at this first level the technical requirements are 
demanding. Four photons need to simultaneously enter 
the circuit. The detections at pol andpo2 have to distin- 
guish between zero, one or two photons. Any inefficiency 
in the production or detection of photons will lead to mis- 
takes and rapidly erase the operation of the gate. High 
visibility single photon and two photon (HOM type) in- 
terference are required simultaneously: as a result excel- 
lent mode-matching and photon indistinguishability are 
essential. 

A significantly simpler CNOT design can be realis ed by 
working in coincidence as discussed by Ralph e t al jl2l| 
and independently by Hofmann and Takeuchi |l22j |. In 
particular we can allow the photon qubits to be their 
own ancilla, such that only two photons are required. 
The gate is shown schematically in Fig. (|ll|l . Consider 
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FIG. 10: Schematic representation of a non-deterministic 
CNOT gate. Polarization encoded qubits are injected at c 
and t. Acillary photons are injected at pi and p2. Success- 
ful operation is heralded by the detection of no photons at 
outputs vol and vo2 and the detection of one and only one 
photon at each of outputs pol and po2. PBS are polarizing 
beamsplitters and hwp are half-wave plates. 
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(59) 



The polarizing beamsplitters then spatially separate the 
polarization modes of the two beams. An array of dif- 
ferent possibilities are present after the middle beam- 
splitters, however, we select (by postselection) only those 
where a photon arrives at both the target and control out- 
puts. There are two ways for this to happen: the control 
photon must take the top path and reflect off beamsplit- 
ter 1; the target photon may take its upper path and 
reflect off beamsplitter 2 or take the bottom path and 
reflect off beamsplitter 3. In both cases the effect is just 
to reduce the amplitude of the successful components by 
a factor of 1/3. The output state is then transformed by 
the second target waveplate such that 

^l=\H),i\H)t + \V),)^^\H),\H), (60) 

Similarly the input \H)c\V)t is unchanged by passage 
through the circuit, other than a 1/3 reduction in ampli- 
tude. 

Things are different when the control is in the vertical 
state. Consider the input state \V)c\H)t. The target 
waveplate produces the transformation 

\V),\H),^±\V)4\H)t + \V)t) (61) 

Now there are three ways for a successful detection to 
occur. The control takes its lower path. If the target 
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FIG. 11: Schematic representation of non-deterministic coin- 
cidence CNOT gate. Polarization encoded qubits are injected 
at c and t. PBS are polarizing beamsplitters and hwp are 
half- wave plates. 



photon takes the bottom path then both must reflect off 
their respective beamsplitters as before, simply reducing 
the amphtude by 1/3. However, if the target photon fol- 
lows its upper path then there are two possibihties at 
beamsplitter 2: either both photons may be reflected, 
giving an amphtude of 1/3, or; both may be transmit- 
ted, giving an amplitude of —2/3. If the photons are 
indistinguishable then these amplitudes are added giv- 
ing a total amplitude for that component of —1/3! Thus 
when the polarization modes arc rccombined the state 
carries a minus sign on one target component and the 
second target waveplate makes the transformation 

^l=\V),{\H)t-\V),)^^\V),\V)t (62) 

and the value of the target qubit is flipped as required. 
Similarly the circuit does the transformation |T^)c|l^)i 
l/3\V)c\H)t- Hence CNOT operation is realized when- 
ever a coincidence is recorded. The probability of success 
is (1/3)2 = 1/9. 

J. O'Brien and G.Pryde et al used this technique to 
demonstrate CNOT operation for single photon qubits 
p_23]. In their experiment a pair of polarisation beam 
displacers was used to create an interferometrically sta- 
ble configuration. Down conversion was used to pro- 
duce suitably pure photon pairs in separable polarization 
states which were injected into the gate. State tomogra- 
phy (see section IIII E|) was used to compare the experi- 
mental output with the expected outcome. Good agree- 
ment was found. In particular entanglement could be 
produced as expected. In la ter e xperiments full process 
tomography was carried out |124| from which an average 
fidelity of around 90% for the gate was calculated. 



2. Teleportation Gates 

We now proceed to the second tier of the KLM scheme. 
Although the gates discussed in the previous section give 
us access to non-trivial two-qubit operations and small 
scale circuits, they are ultimately not scaleable. A cas- 
caded sequence of such non-deterministic gates would be 
useless for quantum computation because the probability 
of many gates working in sequence decreases exponen- 
tially. In order to make a scaleable system we must move 
to teleportation gates. 

The idea that teleportation can be used for universal 
quantum cor nput ation was first proposed by Gottesman 
and Chuang [l25|. Consider the quantum circuit shown 
in Fig. (|12|l (a). Two unknown qubits are individually 
teleported and then a CNOT gate is implemented. Ob- 
viously, but not very usefully, the result is CNOT op- 
eration between the input and output qubits. However, 
the commutation relations between CNOT and the X 
and Z operations used in the teleportation are quite sim- 
ple, such that in the circuits of Fig^| the alternatives 
(a) and (b) are in fact equivalent. But in the circuit of 
FigEl (b) the problem of implementing a CNOT gate 
has been reduced to that of producing the required en- 
tanglement resource. The main point is that this need 
not be done deterministically. Non-deterministic CNOT 
gates could be used in a trial and error manner to build 
up the necessary resource off-line. From this point of 
view the gates of the previous section can be regarded as 
entanglement factories - producing entangled states for 
use in teleportation. Alternatively we can note that some 
photon sources, such as parametric down-conversion, can 
produce entangled photons directly. 

The simplest teleportation gate is shown in Figll3l 
The heart of the gate is a teleported single-rail CS gate. 
CS operation on single-rail qubits can equally well be 
used to produce CS operation on dual-rail qubits simply 
by adding additional rails which do not participate in the 
interaction (Fig^J). The entangled resource is the state 

10101) + 10110) + |1001) - |1010) (63) 

which can be interpreted as two single rail Bell states 
which have had a CS gate applied between them in anal- 
ogy with the resource state in Fig^l (b) . Alternatively 
one can recognize this state as the dual-rail Bell state 
|0101) + 1 1010) with a Hadamard gate apphed to the 
second qubit. Such a state can be generated directly 
by down conversion. This latt er in terpretation is due to 
Pittman, Jacobs and Franson '126^ . 

Single-rail partial Bell measurements are used, as de- 
scribed in section These fail 50% of the time thus the 
probability of success of this gate is 25%. Because the 
partial Bell measurements fail by measuring their inputs 
in the computational basis, so the teleportation gate fails 
in the same way by measuring the logical values of the in- 
put qubits. The key to scale up is that this failure mode 
can be encoded against, as will be described in the next 
section. 
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FIG. 12; Schematic representation of gate operation via tele- 
portation. Figures (a) and (b) are equivalent, yet in (b) a 
non-deterministic CNOT gate is sufficient as failure only de- 
stroys the entanglement: the operation can be repeated till 
successful without losing the qubit. 
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mated to be about 78%. Other demonstrations of this 
type of gat e hav e been made by Pittman et al [128i | and 
Zhao et al il29j . Although this gate is in principle her- 
alded it is important to note that the current low efficien- 
cies of the sources and detectors mean all experiments so 
far have relied on coincidence detection. 

KLM showed that by using more complex entangled 
states teleportation gates with a higher probability of 
success could be implemented. Consider the entangled 

state 



10011) + |1010) + |1100). 



(64) 



If the first two modes of this entangled state are mixed 
with an input qubit on a beam fritter (i.e. an arrange- 
ment of beamsplitters that coherently mixes three input 
fields in equal ratios) and are then photon counted, tele- 
portation can be achieved for certain measurement out- 
comes. For example if the measurement result is " 100" , 
then the conditional state of the remaining two modes of 
the entanglement will be ajlO) -I- /3|11). The state has 
been successfully teleported to the last mode. The other 
mode is definitely in the " 1" state and can be discarded. 
Similarly if the measurement result " 200" was recorded 
then the conditional state of the remaining two modes of 
the entanglement will be a|00) -I- /?|10). Now the state 
has been successfully teleported to the first of the remain- 
ing modes, whilst the other mode is definitely in the "0" 
state and can be discarded. Other measurement results 
will require phase shifts of ±7r/-\/3 to recover the qubit. 
If no photons are counted (assuming unit detection effi- 
ciency) or 3 photons are counted then the original qubit 
must have been in the "0" or "1" states respectively and 
the teleportation fails by measurement of the qubit. The 
combined probability of these failure modes is 1 /3 so the 
teleporter has a 2/3 probability of success. 

This more efficient teleporter can then be used to im- 
plement a teleportation gate with a probability of success 
of 4/9 using the entanglement resource 



FIG. 13: Schematic representation of optical CS gate opera- 
tion via teleportation. Success is heralded by a single photon 
being detected at each of the two pairs of detectors. If zero 
(two) photons are detected at one of the detector pairs then 
the corresponding qubit has been measured to be in the zero 
(one) logical state and the gate has failed. The probability of 
success of the gate is 25%. 



An in principle d emon stration of this gate was made 
by Gasparoni et al |l27j . A femto-second pump pulse 
was double passed through a down conversion crystal to 
produce two entangled pairs of photons, one of which 
was used as the entangled resource whilst the other pair 
served as the input qubits. Gate operation was demon- 
strated with an average gate fidelity that can be esti- 



100110011) + 100111010) + 100111100) + 110100011) 
-llOlOlOlO) + llOlOllOO) + IllOOOOll) 
+ 111001010) + IllOOllOO). (65) 

which is two entangled states of the form of Eq|M| with 
CS gates applied between all the possible combinations 
of output modes. This state could be produced non- 
deterministically using the level one gates but with con- 
siderable overhead. Higher order gates with even better 
probabilities of success are possible with correspondingly 
more complicated resource entanglement. Because of the 
high cost of producing the entanglement this is not a vi- 
able approach to scalability. Instead, in the next section, 
we discuss the much more promising approach of error 
encoding. 
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3. Error Encoding Against Teleportation Failure 



4- Parity States and Cluster States 



In the previous section we have seen that teleportation 
gates can be implemented which have higher probability 
of success than the first tier non-deterministic gates. A 
key feature of these gates is that failure results in the 
measurement of the logical values of the qubits. KLM in- 
troduced an error correction code to protect against such 
computational basis measurements (Z-measurements) of 
the qubits. A logical qubit can be encoded across 2 phys- 
ical qubits as 113] 

= a(|0)|0> + |1)|1)) + /?(|0)|1) + |1)|0» (66) 

This is a parity encoding, that is the "zero" state is rep- 
resented by an equal superposition of all the even parity 
combinations of the 2 qubits whilst the "one" state is 
represented by all the odd parity combinations. Notice 
that if a Z-measurement is made on either of the physical 
qubits of the state in EalCTand the result "0" is obtained, 
then the state collapses to an unencoded qubit, however 
the superposition is preserved. Similarly if the measure- 
ment result is "1" a bit-flipped version of the unencoded 
qubit is the result, but again the superposition is pre- 
served so the qubit can be recovered. 

This encoding thus enables recovery from teleportation 
gate failure and so improves the probability of success of 
the gate by allowing second attempts. An in principle 
de mon stration of this encoding was made by O'Brien et 
al '130] using the two photon CNOT gate discussed in sec- 
tion lVI BTI to produce the required parity encoded states, 
where the CNOT gate takes an unencoded qubit as its 
target input and a diagonal state as its control input. 
It was shown that measurement of either physical qubit 
led to the expected unencoded qubit being projected onto 
the remaining photon to an accuracy of greater than 90% 
fidelity. 

Notice that a two-qubit (and thus non-deterministic) 
gate is needed to produce the parity encoding. It is 
not immediately obvious that producing encoded states 
non-deterministically which then can be used to improve 
the performance of more non-deterministic gates, is a 
winning strategy. KLM showed however, that provided 
you start with teleporters with a probability of success 
greater than 50%, this strategy does improve gates suc- 
cess. For example a 2/3 teleporter used with the parity 
encoding leads to a CS gate success probability of about 
58% (as opposed to 44% without encoding). In order to 
further improve the probability of success KLM concate- 
nates the two qubit parity code. For example the next 
level up logical qubit is given by 

1</.)l4 = a(10)(2)|0)(2) + ll)(2)ll)(2)) 

+/3(10)(2)|l)(2) + |l)(2)|o)(2)) (67) 

High probabilities of success are obtained after a few lev- 
els of concatenation, leading to the claim of a scalable 
system. 



KLM was a major step forward both in opening the 
door to small-scale demonstrations of optical quantum 
circuits, and in pointing the way towards a scalable sys- 
tem. However, in its original form the resources required 
for scale- up were exorbitant. For example the number 
of Bell pairs needed to implement a single CS gate with 
95% probability of success using the original KLM ap- 
proach can be estimated to be in the 10,000's. Fortu- 
nately, considerable progress h as been made in recent 
years in reducing this overhead [l3ll ll32L Il33| with the 
most efficient approaches requiring of order 100 Bell pairs 
for a CS with > 95% success 134, 135] . Two related but 
distinct approaches have emerged which we now discuss. 

An alternative wa y to s cale up the parity states, intro- 
duced by Hayes et al |l33j ] , is not to concatenate the code 
as per Eg 1671 but instead to increase it incrementally. 
Hence a logical qubit can be encoded across n qubits by 
representing logical "zero" by all the even parity combi- 
nations of the n qubits and logical "one" by all the odd 
parity combinations. This code retains the feature that 
if the logical qubit is encoded across n physical qubits 
then a computational basis measurement on any one of 
the qubits reduces the state to a logical qubit encoded 
across (n — 1) physical qubits (with the possible need for 
a bit-flip). Specifically, this parity encoding is given by 

|0)(") EE 0-1-)®" + ]-)«5»)/V2 

11)" = (1+)®" - 1-)»")/a/2, (68) 

where \±) = (JO) ± ll))/%/2. 

There are two operations which are easily performed 
on parity encoded states: a rotation by an arbitrary 
amount around the x axis of the Bloch sphere (i.e. 
Xe = cos{e/2)I + ism{e/2)X) [Hi], which can be per- 
formed by applying that operation to any of the physical 
qubits and; a Z operation, which can be performed by ap- 
plying Z to all the physical qubits (since the odd-parity 
states will acquire an overall phase flip) . 

The teleportation gates are reduced to just partial 
single-rail and dual-rail Bell-state measurements. A dual- 
rail Bell measurement can be used to add n physical 
qubits to a parity encoded state using a resour ce o f 
10)("+2). This is referred to as type-II fusion (///) [l3^ . 
The result of /// is 



fiiW 



(m)|Q\ (n+2) 



|^)(™+n) (success) 
|^)(™-i)|0)(«+i) (failure) 



(69) 

When successful (with probability 1/2), the length of 
the parity qubit is extended by n. A phase flip correc- 
tion may be necessary depending on the outcome of the 
Bell- measurement. If unsuccessful a physical qubit is re- 
moved from the parity encoded state, and the resource 
state is left in the state jO)^""'"^-' (which may be recy- 
cled). This encoding procedure is equivalent to a gam- 
bling game where we either lose one level of encoding, or 
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gain n depending on the toss of a coin. Clearly if n > 2 
this is a winning game. The required resource states can 
be built from Bell pairs using a combination of single-rail 
Bell measurements (type I fusion) and ///. The remain- 
ing gates in order to achieve a universal gate set (a Zqq 
and a CNOT gate) can b e efficiently performed using these 
fusion techniques |l35j |. The resource overhead for per- 
forming gates in this way is of order 100 Bell pairs per 
gate. 

Raussendorf and Briegcl have suggested an alternative 
way of performing quantum computing, distinct from the 
usual c ircui t model, called cluster-state quantum compu- 
tation |137| . It is based on measurement induced quan- 
tum evolution and so is sometimes referred to as "one- 
way" quantum computation. In their approach a large 
entangled state of a particular form, called a cluster state, 
is constructed first. Quantum computation is then car- 
ried out by making a series of measurements on the clus- 
ter state. For example any evolution of a single qubit 
can be simulated by: (i) preparing a string of qubits all 
in the states |0) -I- 11); (ii) linking each nearest neighbour 
by C-S gates (this forms a linear cluster state), and then; 
(iii) measuring the single qubits in the string in sequence. 
The measurement basis chosen for each qubit depends on 
the single qubit unitaries one wishes to simulate and the 
result of the measurement of the preceding qubit. Each 
qubit measurement simulates the unitary evolution HZg 
where H is the Hadamard transformation and Zg is a 
rotation about z. An arbitrary single qubit unitary can 
be simulated using a four qubit cluster state and three 
measurements. 

We can illustrate this by considering an arbitrary ro- 
tation about X, Xg = HZgH which can be achieved with 
a 3 qubit cluster state and 2 measurements. The first 
qubit is prepared in some arbitrary state a\Q) + /3|1). 
A cluster state is then formed by applying C-S gates to 
the arbitrary qubit and two other qubits prepared in di- 
agonal states, resulting in the state a(|000) -I- |010) -|- 
|001) - |011)) + /3(|100) + |101) - |110) + |111)). The 
idea is then to simulate the single qubit x rotation via 
measurement. The first qubit is measured in the diag- 
onal basis: \Dl) = |0) + |1), \D2) = -|0) + |1). If 
the outcome is Dl then the second qubit is measured 
in the phase rotated basis: \R1{0)) ~ |0) -f expi0|l), 
\R2{6)) = -|0) + expie*]!). If, on the other hand, the 
outcome is D2 then the second qubit is measured in 
the phase anti-rotated basis: \R1{0)) = |0) -I- exp — 16*11), 
\R2{6)) = — 10) + exp— 16*11). After these measurements 
the state of the last qubit is the same as that of the orig- 
inal qubit, but rotated about x by an angle 9. However 
the effective computational basis of the qubit depends on 
the outcomes of the measurements in the following way: 
(i) Dl, Rl{9): the original computational basis, (ii) Dl, 
R2{6): bit-flip of the original computational basis, (ii) 
D2, Rl{—6): phase-flip of the original computational ba- 
sis, (ii) D2, R2{—9): bit-flip and phase-flip of the original 
computational basis. 

By joining linear chains with CS gates to create 2- 



dimensional cluster states, two qubit gates can be built 
into the cluster, enabling universal quantum computa- 
tion. The first suggestion that measurement based quan- 
tum computation could help to reduce the resour ces in 
an optical system was made by Yoran and Resnik |l3lj |. 
Subsequently Nielse n ada pted the complete cluster state 
approach to LOQC '132^. He showed that cluster states 
could be efficiently built up using the teleportation gates. 
This follows from the fact that the cluster states are 
able to recover from computational basis measurements 
in a similar (but not identical) way to that of the parity 
states. The application of the fusion techniques described 
above |l34l | (which were in fact initially developed by 
Browne and Rudolph for cluster state production) fur- 
ther reduces the resource overhead. In this approach 
"mini-cluster" states are built up non-deterministically 
and then fused on to the main cluster in a similar way to 
that already described for parity states. This is perhaps 
the most efficient of the photonic schemes, requiring ap- 
proximately 60 Bell pairs per two-qubit gate, though the 
exact meaning of " per gate" in the cluster state paradigm 
is more ambiguous than in circuit models such as the par- 
ity state approach. 

In principle optical demonstrations of one-way quan- 
tum computation have now been achieved with coinci- 
dence counting. Simple cluster state computation using 
a 4 qubit cluster was demonstrated experimentally by 
Walther et al |138| . In this experiment the cluster state 
was generated directly from parametric down conversion. 
In other experiments the cluster states were constructed 
from Bell pairs by Zhang et al using the fusion t echn ique 
|139( and by Kiesel et al using the C-Sign gate |l40j |. 



5. Coherent States 

Finally we note that a linear optics quantum compu- 
tation scheme can also be constructed using the coherent 
state qubits discussed in section iHll The basic resource 
state required is the superposition state: |a) -I- | — a). 
These, in conjunction with homodyne detection, pho- 
ton counting and linear opti cs, are sufficient to produce 
a scaleable system |^ Il4l( . As for the photonic ap- 
proach the basic gates are non-deterministic and need 
to be scaled up by teleportation. Unlike the photonic 
approach the probability of success of the basic gates is 
much higher (80-90%) and (as we noted in section W\ 
coherent state qubit teleportation is deterministic. This 
means that the over-heads for scale-up are much lower. 
On the other hand, the relative cost of the required su- 
perposition state resources compared to the Bell pairs 
needed for the photonic scheme are not known, making 
direct comparison's difficult. A number of groups are cur- 
rently working towards demonstrations of coherent state 
superpositions so these issues may become clearer soon. 
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C. Fault Tolerance 

When large scale quantum processing is considered we 
have to worry about the propagation of small errors in- 
evitably introduced during gate operations. If uncor- 
rected, such errors would grow uncontrollably and make 
the computation useless. The answer to this problem is 
fault tolerant error correction 0, ^| . The idea of error 
correction is self-explanatory, though its implementation 
on quantum systems requires some care. Classically we 
might consider using a redundancy code such that (for 
example) — > 0, 0, and 1^1,1, 1. If a bit flip occurs 
on one of the bits we might end up with 0, 1, or 1, 0, 1, 
but we can recover the original bit value by taking a 
majority vote. At first it may seem that such a code can- 
not be used for quantum mechanical systems because: 
(i) the no-cloning theorem means we can not make 
copies of an unknown qubit and; (ii) taking the major- 
ity vote is a measurement that will collapse our quantum 
superposition. It turns out however that a quantum ana- 
log is possible. A quantum redundant encoding might be 
a|0) — > a|000) -)-/3|lll) where we have created an 
entangled state rather than copies. It is then possible, us- 
ing two CNOT gates and two ancillas, to identify an error 
without collapsing the state, by reading out the parity of 
pairs of qubits. For example a bit-flip error might result 
in the state a|001) + /3|110). The parity of the first two 
qubits will be zero whilst the parity of the second two 
qubits will be one, thus unambiguously identifying that 
an error has occurcd on the last qubit. Because we are 
measuring the parity, not the qubit value, the superpo- 
sition is not collapsed. Such codes can be expanded to 
cope with the possibility of more than one error occurring 
between correction attempts and to cope with multiple 
types of errors. Of course the CNOT gates being used to 
detect and correct the errors may themselves be faulty. 
An error correction code is said to be fault tolerant if er- 
ror propagation can be prevented even if the components 
used to do the error correction introduce errors them- 
selves. Typically this is only possible if the error rate is 
below some level known as t he fa ult tolerant threshold. 

The original KLM paper |ll3l | showed that in princi- 
ple LOQC was fault tolerant, though a general threshold 
was not calculated. Optical cluster state computation 
has also been shown to be fault tolerant, with thresh- 
olds against depolarization errors of about a hundredth 
of a percent ,142] . Although such a number is daunting, 
the precision of optics is such that it is not inconceivable. 
Presently the dominant error in optical quantum process- 
ing is loss, both in components, detectors and sources. 
The prospects for reducing loss to such levels are remote 
so some effort has gone into optimizing codes specifically 
against loss. KLM estimated a threshold of about 1% for 
loss tolerance (i.e. fault tolerance where the only error 
considered is loss). Remaining with the original KLM 
gate approach Silva et al were able to show that the loss 



threshold might lie as high as 11% |l43j . Using the parity 
state approach and assuming that components, sources 
and detectors all had an equal loss of x%, Ralph et al 
numerically obtained a loss threshold of x = 17% (1441] . 
A roughly equivalent value was obtai ned b y Varnava et 
al for loss tolerance of cluster states |l45l |. These nice 
results for loss tolerance must be treated with some cau- 
tion given the tougher figures for general fault tolerance, 
however it is encouraging that the most resource efficient 
approaches also seem to display good resilience. 

VII. CONCLUSION 

Light holds a privileged position in quantum informa- 
tion science as the only reasonable candidate for quantum 
communication. This is not just because of its mobil- 
ity, but also, as we have seen, because of the ease with 
which certain critical manipulations of quantum optical 
states can be achieved. The scope of quantum processing 
tasks that can be achieved in optics has expanded rapidly 
in recent years leading to remarkable progress in imple- 
menting quantum information protocols. The progress in 
QKD in particular is sufficiently advanced that commer- 
cial applications are seriously considered. Teleportation, 
of a quality clearly exceeding the limits set in the absence 
of entanglement, has been demonstrated in both the dis- 
crete and continuous domains. The demonstration of ba- 
sic two-qubit quantum gates is promising but is a long 
way short of full-scale quantum computation. Continued 
advances along this path require technical solutions to 
the problem of efficient single photon production, detec- 
tion and memory. 

An exciting new direction that we have not discussed 
much here is the possibility of hybrid optical/atomic 
and/or solid-state systems. It has long been recognized 
that optical "fiying qubits" acting as a data bus can solve 
the connectivity problem in atomic or solid-state quan- 
tum computer architectures. Alternatively we might use 
the "standing qubits" as memory, whilst processing the 
quantum information optically. The major problem with 
this idea has been the interface between the standing 
and flying qubits. Recently significant progress has been 
made in this direction. For example the ion trap pho- 
ton source discussed in section llil Dr65l |. being coherent, 
could in principle also act as an interface. Another pos- 
sibility is to use optical quantum processing to entangle 
distant standing qubits, thus enabling teleportation of in- 
formation between distant sites or th e formatio n of clus- 
ter states for quantum computation jl46l Il47j . Recent 
experimental progress in this direction has included the 
demo nstr ation of entanglement between ions and pho- 
tons |l48l |. These and other emerging technologies com- 
bined with achievements described in this review indicate 
a bright future for quantum information processing in op- 
tics. 
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